CVSS 3.0
7.2 highCVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HCVE-2019-10863
High (7.2) in combodo teemip. EPSS 13% chance of exploitation in the next 30 days.
A command injection vulnerability exists in TeemIp versions before 2.4.0. The new_config parameter of exec.php allows one to create a new PHP file with the exception of config information. The malicious PHP code sent is executed instantaneously and is not saved on the server.
Severity
- EPSS
- 13% chance of exploitation in the next 30 days; higher than 96% of CVEs (scores of 2026-10-31)
- CWE
- CWE-94
- Published
- Modified
- Record from
- the NVD, synced
Affected
- combodo:teemip
References
- https://pentest.com.tr/exploits/TeemIp-IPAM-2-4-0-new-config-Command-Injection-Metasploit.html
- https://www.exploit-db.com/exploits/46641
- https://www.exploit-db.com/exploits/46641/
- https://pentest.com.tr/exploits/TeemIp-IPAM-2-4-0-new-config-Command-Injection-Metasploit.html
- https://www.exploit-db.com/exploits/46641