Kaltura versions 13.1.0 and below suffer from code execution and cross site scripting vulnerabilities.
f13d7e1066f62d0ca0b0da505366a1d539c7943e2d61a9efc629ec92d9a34e9f
This Metasploit module exploits the command injection vulnerability of DenyAll Web Application Firewall. Unauthenticated users can execute a terminal command under the context of the web server user.
e5643fffa4297f5d5b48f257e93c3396e073c9df8c778d9d0abdbed89abcab11