CVE Catalog
CVE-2017-11366
CriticalSummary
Codiad versions before 2.8.4 are vulnerable to remote command execution because shell commands can be embedded in parameter values, as demonstrated by search_file_type.
Risk Assessment
Exploitation of this vulnerability could lead to unauthorized access to the system and execution of arbitrary commands on the server, posing a serious security threat to the organization.
Recommendation
It is recommended to upgrade Codiad to version 2.8.4 or later to mitigate this vulnerability.
Original NVD description (English source)
components/filemanager/class.filemanager.php in Codiad before 2.8.4 is vulnerable to remote command execution because shell commands can be embedded in parameter values, as demonstrated by search_file_type.