Threats tagged 'ghsa-jgv8-7p8x-qfg2'

Telenia Software TVox versions 26.5.3 and earlier 26.x, as well as 24.9.21 and earlier 24.x versions, contain an OS command injection vulnerability in the action_audio.php script. Authenticated attackers can exploit this flaw by passing a crafted pid parameter when the action parameter is set to checkProcess, allowing execution of arbitrary OS commands with apache user privileges.