title: SUNNET WMPro v5.0 and v5.1 has OS Command Injection
description: The SUNNET WMPro v5.0 and v5.1 for eLearning system has OS Command Injection via "/teach/course/doajaxfileupload.php". The target server can be exploited without authentication.
problem types: CWE-78 OS Command Injection
affected:
{
product: WMPro
vendor: SUNNET
versions:
status: affected, version: 5.0
status: affected, version: 5.1
}