{"cvss":0.0,"datePublished":"2021-06-03T00:00:00Z","dateUpdated":"2021-06-03T00:00:00Z","description":"Zeroshell 3.9.0 is prone to a remote command execution vulnerability. Specifically, this issue occurs because the web application mishandles a few HTTP parameters. An unauthenticated attacker can exploit this issue by injecting OS commands inside the vulnerable parameters.","dueDate":"","id":"CVE-2019-12725","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"zeroshell","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"zeroshell zeroshell Improper Neutralization of Special Elements used in an OS Command","vendor":"zeroshell"}