Advisory Weakness Curation

OpenCRX allows a remote attacker to execute arbitrary code via a crafted request An issue in OpenCRX v.5.2.2 allows a remote attacker to execute arbitrary code via a crafted request.

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') An issue in OpenCRX v.5.2.2 allows a remote attacker to execute arbitrary code via a crafted request.

Improper Restriction of XML External Entity Reference An issue in openCRX v.5.2.2 allows a remote attacker to read internal files and execute server side request forgery attack via insecure DocumentBuilderFactory.