Unrated severityNVD Advisory· Published May 12, 2015· Updated May 6, 2026

CVE-2015-2844

Description

The cpanel function in go_site.php in GoAutoDial GoAdmin CE before 3.3-1420434000 allows remote attackers to execute arbitrary commands via the $action portion of the PATH_INFO.

Affected products

Goautodial/Goadmin Ce2 versions
cpe:2.3:a:goautodial:goadmin_ce:3.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:goautodial:goadmin_ce:3.0:*:*:*:*:*:*:*
- cpe:2.3:a:goautodial:goadmin_ce:3.3:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.exploit-db.com/exploits/36807/nvdExploit
goautodial.org/news/21nvdVendor Advisory
packetstormsecurity.com/files/131543/GoAutoDial-SQL-Injection-Command-Execution-File-Upload.htmlnvd
www.securityfocus.com/archive/1/535319/100/1100/threadednvd
www.securityfocus.com/bid/74281nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.031
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000