CVE-2020-25494

PoC ×2—1

CVSS 3.1

9.8 critical

EPSS

39%p99

Published

Dec 18, 2020 (Dec 18, 2020)

Modified

Jun 17, 2026

Description

Xinuos (formerly SCO) Openserver v5 and v6 allows attackers to execute arbitrary commands via shell metacharacters in outputform or toclevels parameter to cgi-bin/printbook.

Vendors: xinuos
Products: openserver
Weakness: CWE-78
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (39.2%)

In the news1 stories

Necro botnet now targets Visual Tools DVRs

Security AffairsOct 12, 22:48 UTC · Oct 12, 2021Malware in the wildCVE-2020-15568 CVE-2021-2900 CVE-2020-25494+2 CVEs