FlexPaper/FlowPaper 2.3.6 - Remote Code Execution
Short Info
Level
Critical
Single Scan
Single Scan
Can be used by
Asset Owner
Estimated Time
10 seconds
Time Interval
24 days 4 hours
Scan only one
Domain, Subdomain, IPv4
Toolbox
-
The Publish Service in FlexPaper (later renamed FlowPaper) 2.3.6 allows remote code execution via setup.php and change_config.php.
References:
