← Database

CVE-2008-0148

CRITICAL CVSS: 10.0 Published: 2008-01-09 Modified: 2026-06-16

Description

TUTOS 1.3 does not restrict access to php/admin/cmd.php, which allows remote attackers to execute arbitrary shell commands via the cmd parameter in a direct request.

Affected Platforms

Tutos Tutos

Weakness Type

CWE-264

References