13 Layers
SHARE

The web part of Zenitel AlphaCom XE Audio Server through 11.2.3.10, called AlphaWeb XE, does not restrict file upload in the Custom Scripts section at php/index.php. Neither the content nor lengthiness of the uploaded files is checked, allowing execution of PHP code under the /cmd directory. (CVSS:0.0) (Closing Update:2021-09-15)

13 Layers Managed Security Services