CVE-2020-11084

Published July 14th, 2020

View on NVD ↗

CVSS v3

6.4

MEDIUM

CVSS v2

5.5

MEDIUM

Affected

PROJECT

Description

In iPear, the manual execution of the eval() function can lead to command injection. Only PCs where commands are manually executed via "For Developers" are affected. This function allows executing any PHP code within iPear which may change, damage, or steal data (files) from the PC.

yaBobJonez/iPear

iPear XS (Smol RAM edition) simulator - the worst phone simulator, that can steal your data though I don't care.

GitHub