CVE-2020-14421

High

aaPanel through 6.6.6 allows remote authenticated users to execute arbitrary commands via the Script Content box on the Add Cron Job screen.

mitre·CWE-88·Published 2020-06-18

CVSS

7.2

EPSS

0.06

KEV

Exploits

cve.orgen

140 chars

aaPanel through 6.6.6 allows remote authenticated users to execute arbitrary commands via the Script Content box on the Add Cron Job screen.

NVDen

140 chars

aaPanel through 6.6.6 allows remote authenticated users to execute arbitrary commands via the Script Content box on the Add Cron Job screen.

NVDes

164 chars

aaPanel versiones hasta 6.6.6, permite a usuarios autenticados remotos ejecutar comandos arbitrarios por medio del cuadro Script Content en la pantalla Add Cron Job

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	9.0	8.0	10.0	AV:N/AC:L/Au:S/C:C/I:C/A:C
3.1	Primary	NVD	7.2	1.2	5.9	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H