Unrated severityNVD Advisory· Published Dec 18, 2020· Updated Aug 4, 2024

CVE-2020-25494

Description

Xinuos (formerly SCO) Openserver v5 and v6 allows attackers to execute arbitrary commands via shell metacharacters in outputform or toclevels parameter to cgi-bin/printbook.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Xinuos (formerly SCO)/Openserverdescription
Caldera/Openserverllm-fuzzy
Range: v5, v6

Patches

Vulnerability mechanics

References

packetstormsecurity.com/files/160635/SCO-Openserver-5.0.7-Command-Injection.htmlmitrex_refsource_MISC
github.com/Ramikan/Vulnerabilities/blob/master/SCO%20Openserver%20OS%20Command%20Injection%20Vulnerabilitymitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.031
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000