PowerCMS XMLRPC API vulnerabilities
1 known vulnerability in PowerCMS XMLRPC API from Alfasado. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest first
- 9.8 Critical severity
PowerCMS XMLRPC API: Improper Neutralization of Special Elements used in an OS Command
PowerCMS XMLRPC API provided by Alfasado Inc. contains a command injection vulnerability. Sending a specially crafted message by POST method to PowerCMS XMLRPC API may allow arbitrary Perl script execution, and an arbitrary OS command may be executed through i