Security Advisory

CVE-2019-10863

7.2
HIGH

Vulnerability Description

A command injection vulnerability exists in TeemIp versions before 2.4.0. The new_config parameter of exec.php allows one to create a new PHP file with the exception of config information. The malicious PHP code sent is executed instantaneously and is not saved on the server.
Published Date April 4, 2019
Official Source NIST NVD Advisory