Arbitrary Code Execution in Best Practical Solutions RT 3.6.x, 3.7.x, and 3.8.x before 3.8.12 and 4.x before 4.0.6

CVE-2011-4458 · MEDIUM Severity

AV:N/AC:M/AU:N/C:P/I:P/A:P

Best Practical Solutions RT 3.6.x, 3.7.x, and 3.8.x before 3.8.12 and 4.x before 4.0.6, when the VERPPrefix and VERPDomain options are enabled, allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-5092 and CVE-2011-5093.

Learn more about our Web Application Penetration Testing UK.