Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Liman Central Management System Liman MYS (HTTP/Controllers, CronMail, Jobs modules) allows Command Injection.
CVSS 3.1HIGH 8.8·Network·Low privileges·No interaction·EPSS 0.01819·Published 2023-02-24·Fixed in 1.8.3-462CWE-77