CVE-2014-0121

Critical

Published: 29/12/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The admin terminal in Hawt.io does not require authentication, allowing remote attackers to execute arbitrary commands via the k parameter.

The lack of authentication in the admin terminal poses a serious security risk, enabling attackers to gain full control over the application.

It is recommended to implement an authentication mechanism for the admin terminal to minimize the risk of unauthorized access.

Original NVD description (English source)

The admin terminal in Hawt.io does not require authentication, which allows remote attackers to execute arbitrary commands via the k parameter.