CVE Intelligence

Chevere SpA Chevereto vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Chevere SpA Chevereto: 1 record(s), with affected versions and fixes.

CVE-2020-37186 Critical · 9.8 CWE-94 Feb 11, 2026
Chevereto 3.13.4 Core - Remote Code Execution
Chevereto 3.13.4 Core contains a remote code execution vulnerability that allows attackers to inject malicious code during database configuration installation. Attackers can manipulate the database table prefix parameter to write a PHP shell file and execute arbitrary system commands through a crafted POST request.