CVE-2018-5782

CRITICAL

ShoreTel / Mitel Connect ONSITE 19.49.5200.0 - Remote Code Execution

Title source: exploit-db.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2018-5782 has a selected CVSS score of 9.8 (critical); EIP currently links 1 catalogued exploit.

Description

A vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and earlier, and Mitel ST 14.2, release GA28 and earlier, could allow an unauthenticated attacker to inject PHP code using specially crafted requests to the vsethost.php page. Successful exploit could allow an attacker to execute arbitrary PHP code within the context of the application.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

Proofs of concept

1

Catalogued exploits

ExploitDBShoreTel / Mitel Connect ONSITE 19.49.5200.0 - Remote Code ExecutionExploitDB exploitby twosevenzeroNot analyzed1 file
ExploitDB
PoC details

References

4