[0day-rubbish] Maian Guardian 2.1 license generator projid command injection to www-data uid 33 code execution (7.2, PR:H)

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-10-15 07:42 UTC
Importiert: 2026-10-15 09:17 UTC
Quelle-ID: full_disc
uid_hash: ada7e0d41c5759f8e77b50b328afef0b8529c58b57bd529a45c804d3ddaae9ac

Full Disclosure

Posted by disclosure via Fulldisclosure on Oct 15 0day Rubbish Research Team is publicly disclosing a vulnerability in Maian

Guardian 2.1, the self-hosted licensing system for PHP applications encoded

with SourceGuardian, distributed as a closed-source commercial PHP script by

Maian Script World (United Kingdom) and verified end to end against a real

installation of that version.

Type: OS command injection (CWE-78 primary; CWE-116, CWE-20 and CWE-561

contributing; CWE-250 and CWE-732 as...

No data

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
Full Disclosure	full_disc	threat_intel		-	de	https://seclists.org/rss/fulldisclosure.rss