Pinger 1.0 contains a remote code execution vulnerability that allows attackers to inject shell commands through the ping and socket parameters. Attackers can e…

CVE-2020-37123 affects Pinger 1.0, a network utility tool. The vulnerability allows remote code execution through command injection in the ping and socket parameters. Attackers can exploit unsanitized input in ping.php to inject shell commands using metacharacters. This enables arbitrary PHP file creation and system command execution. The vulnerability provides complete system compromise capabilities to remote attackers.