CVE-2023-1685

MEDIUM

HadSky < 7.11.8 - Remote Command Injection via Installation Interface

Title source: llm
STIX 2.1

Description

A vulnerability was found in HadSky up to 7.11.8. It has been declared as critical. This vulnerability affects unknown code of the file /install/index.php of the component Installation Interface. The manipulation leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-224242 is the identifier assigned to this vulnerability.

References (4)

Core 4
Core References
Third Party Advisory vdb-entry technical-description
https://vuldb.com/?id.224242
Third Party Advisory signature permissions-required
https://vuldb.com/?ctiid.224242

Scores

CVSS v3 6.3
EPSS 0.0579
EPSS Percentile 90.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Details

CWE
CWE-77
Status published
Products (1)
hadsky/hadsky 7.11.0 - 7.11.8
Published Mar 29, 2023
Tracked Since Feb 18, 2026