[0day-rubbish] Maian Guardian 2.1 license generator projid command injection to www-data uid 33 code execution (7.2, PR:H)
Maian Guardian 2.1 license generator has a command injection that runs code as www-data.
The 0day Rubbish Research Team publicly disclosed an OS command injection in Maian Guardian 2.1, a closed-source PHP licensing system from UK vendor Maian Script World. The projid parameter was verified end to end on a real installation and can execute commands as www-data (uid 33). The issue is scored 7.2 with privileges required high and cites CWE-78; no CVE or in-the-wild exploitation is stated.
- OS command injection in the Maian Guardian 2.1 license generator projid field.
- Verified on a real install; commands run as www-data uid 33.
- Scored 7.2 with privileges required high; no CVE assigned.
- Vendors
- Maian Script World
- Products
- Maian Guardian
- Organizations
- 0day Rubbish Research TeamMaian Script World
- Countries
- United Kingdom
From the original article
Posted by disclosure via Fulldisclosure on Oct 15 0day Rubbish Research Team is publicly disclosing a vulnerability in Maian Guardian 2. 1, the self-hosted licensing system for PHP applications encoded with SourceGuardian, distributed as a closed-source commercial PHP script by Maian Script World (United Kingdom) and verified end to end against a real installation of that version.
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.