CVE-2020-12078

An issue was discovered in Open-AudIT 3.3.1. There is shell metacharacter injection via attributes to an open-audit/configuration/ URI. An attacker can exploit this by adding an excluded IP address to the global discovery settings (internally called exclude_ip). This exclude_ip value is passed to the exec function in the discoveries_helper.php file (inside the all_ip_list function) without being filtered, which means that the attacker can provide a payload instead of a valid IP address.

• CWE-78

• http://packetstormsecurity.com/files/157477/Open-AudIT-Professional-3.3.1-Remote-Code-Execution.htmlExploit, Third Party Advisory, VDB Entry
• https://gist.github.com/mhaskar/dca62d0f0facc13f6364b8ed88d5a7fdExploit, Third Party Advisory
• https://github.com/Opmantek/open-audit/commit/6ffc7f9032c55eaa1c37cf5e070809b7211c7e9aPatch, Third Party Advisory
• https://shells.systems/open-audit-v3-3-1-remote-command-execution-cve-2020-12078/Exploit, Third Party Advisory
• http://packetstormsecurity.com/files/157477/Open-AudIT-Professional-3.3.1-Remote-Code-Execution.htmlExploit, Third Party Advisory, VDB Entry
• https://gist.github.com/mhaskar/dca62d0f0facc13f6364b8ed88d5a7fdExploit, Third Party Advisory
• https://github.com/Opmantek/open-audit/commit/6ffc7f9032c55eaa1c37cf5e070809b7211c7e9aPatch, Third Party Advisory
• https://shells.systems/open-audit-v3-3-1-remote-command-execution-cve-2020-12078/Exploit, Third Party Advisory

Published

Apr 28, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-12071Anchor 0.12.7 allows admins to cause XSS via crafted post co…4.8
• CVE-2020-12073The responsive-add-ons plugin before 2.2.7 for WordPress has…8.8
• CVE-2020-12074The users-customers-import-export-for-wp-woocommerce plugin …8.8
• CVE-2020-12075The data-tables-generator-by-supsystic plugin before 1.9.92 …8.8
• CVE-2020-12076The data-tables-generator-by-supsystic plugin before 1.9.92 …8.8
• CVE-2020-12077The mappress-google-maps-for-wordpress plugin before 2.53.9 …8.8
• CVE-2020-12079Beaker before 0.8.9 allows a sandbox escape, enabling system…10
• CVE-2020-1208A remote code execution vulnerability exists when the Window…7.8
• CVE-2020-12080A Denial of Service vulnerability has been identified in Fle…7.5
• CVE-2020-12081An information disclosure vulnerability has been identified …7.5
• CVE-2020-12082A stored cross-site scripting issue impacts certain areas of…5.4
• CVE-2020-12083An elevated privileges issue related to Spring MVC calls imp…9.9