2015-05-11

2015-05-12

2015-05-13

All (3) Critical (3) High (6) Medium (18) Low (1)

CVE-2015-2845 CRITICAL POC THREAT Emergency

The cpanel function in go_site.php in GoAutoDial GoAdmin CE before 3.3-1421902800 allows remote attackers to execute arbitrary commands via the $type portion of the PATH_INFO. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 87.5%.

Command Injection PHP Goadmin Ce

NVD Exploit-DB

CVSS 2.0

10.0

EPSS

87.5%

Threat

6.1

CVE-2015-2842 CRITICAL POC THREAT Emergency

Unrestricted file upload vulnerability in go_audiostore.php in the audiostore (Voice Files) upload functionality in GoAutoDial GoAdmin CE 3.x before 3.3-1421902800 allows remote attackers to execute. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 43.9%.

RCE PHP File Upload Goadmin Ce

NVD Exploit-DB

CVSS 2.0

10.0

EPSS

43.9%

Threat

4.8

CVE-2015-2844 CRITICAL POC THREAT Emergency

The cpanel function in go_site.php in GoAutoDial GoAdmin CE before 3.3-1420434000 allows remote attackers to execute arbitrary commands via the $action portion of the PATH_INFO. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 39.1%.

Command Injection PHP Goadmin Ce

NVD Exploit-DB

CVSS 2.0

10.0

EPSS

39.1%

Threat

4.7