A Server Side Template Injection (SSTI) vulnerability in Pentest-Collaboration-Framework v1.0.8 allows an authenticated remote malicious user to execute arbitrary code through /project/PROJECTNAME/reports/.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
pentest collaboration framework project pentest collaboration framework 1.0.8 |