CWE Code: 77
Vulnerability Type: privilege_escalation
CVSS Score: 9.0
CWE Name:  Improper Neutralization of Special Elements used in a Command ('Command Injection')
Summary: an issue was discovered in total.js cms 12.0.0. an authenticated user with the widgets privilege can gain achieve remote command execution (rce) on the remote server by creating a malicious widget with a special tag containing javascript code that will be evaluated server side. in the process of evaluating the tag by the back-end, it is possible to escape the sandbox object by using the following payload: <script total>global.process.mainmodule.require(child_process).exec(rce);</script>
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2019-09-05
Last Modified Date: 2019-10-22