Threats tagged 'ghsa-2hx4-gpwf-5qv2'

Vinchin Backup and Recovery versions 7.2 and earlier contain an authenticated remote code execution vulnerability via the getVerifydiyResult function in ManoeuvreHandler.class.php. This flaw allows an attacker with valid credentials to execute arbitrary code remotely. The vulnerability has a high severity rating with a CVSS score of 8.8, indicating significant impact on confidentiality, integrity, and availability.