Vulnerability Description
Pinger 1.0 contains a remote code execution vulnerability that allows attackers to inject shell commands through the ping and socket parameters. Attackers can exploit the unsanitized input in ping.php to write arbitrary PHP files and execute system commands by appending shell metacharacters.
CVSS Score
CRITICAL
Related Weaknesses (CWE)
References
- https://github.com/wcchandler/pinger
- https://www.exploit-db.com/exploits/48323
- https://www.vulncheck.com/advisories/pinger-remote-code-execution
FAQ
What is CVE-2020-37123?
CVE-2020-37123 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Pinger 1.0 contains a remote code execution vulnerability that allows attackers to inject shell commands through the ping and socket parameters. Attackers can exploit the unsanitized input in ping.php...
How severe is CVE-2020-37123?
CVE-2020-37123 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2020-37123?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.