cbcvebase.

Chevere Spa Chevereto vulnerabilities

1 known vulnerability affecting chevere_spa/chevereto.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2020-37186P2CRITICALCVSS 9.8≤ 3.13.42026-02-11
CVE-2020-37186 [CRITICAL] CWE-94 CVE-2020-37186: Chevereto 3.13.4 Core contains a remote code execution vulnerability that allows attackers to inject Chevereto 3.13.4 Core contains a remote code execution vulnerability that allows attackers to inject malicious code during database configuration installation. Attackers can manipulate the database table prefix parameter to write a PHP shell file and execute arbitrary system commands through a crafted POST request.
nvd
Chevere Spa Chevereto vulnerabilities | cvebase