Critical severity9.8NVD Advisory· Published Apr 1, 2020· Updated Jun 17, 2026
CVE-2020-10948
CVE-2020-10948
Description
Jon Hedley AlienForm2 (typically installed as af.cgi or alienform.cgi) 2.0.2 is vulnerable to Remote Command Execution via eval injection, a different issue than CVE-2002-0934. An unauthenticated, remote attacker can exploit this via a series of crafted requests.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- cpe:2.3:a:alienform2_project:alienform2:2.0.2:*:*:*:*:*:*:*
- Range: =2.0.2
Patches
Vulnerability mechanics
References
1- github.com/fireeye/Vulnerability-Disclosures/tree/master/FEYE-2020-0004nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.