← Database

CVE-2010-20059

N/A CVSS: N/A Published: 2025-08-20 Modified: 2026-06-16

Description

FreeNAS 0.7.2 prior to revision 5543 includes an unauthenticated command‐execution backdoor in its web interface. The exec_raw.php script exposes a cmd parameter that is passed directly to the underlying shell without sanitation.

Affected Platforms

Unknown

Weakness Type

CWE-78

References