VYPR

Jiacrontab

by Iwannay

Source repositories

CVEs (1)

  • CVE-2018-19793HigDec 3, 2018
    risk 0.47cvss 7.2epss 0.02

    jiacrontab 1.4.5 allows remote attackers to execute arbitrary commands via the crontab/task/edit?addr=localhost%3a20001 command and args parameters, as demonstrated by command=cat&args=/etc/passwd in the POST data.