Lucene search
China National Vulnerability DatabaseCNVD-2022-06536HistoryDec 01, 2020 - 12:00 a.m.
Zeroshell command injection vulnerability
2020-12-0100:00:00
China National Vulnerability Database
www.cnvd.org.cn
10
0.956 High
EPSS
Percentile
99.4%
Zeroshell is a small open source Linux distribution for servers and embedded systems designed to provide web services. a command injection vulnerability exists in the /cgi-bin/kerbynet StartSessionSubmit parameter in Zeroshell 3.9.3. An attacker could execute system commands via shell metacharacters and
characters to execute system commands.
| CPE | Name | Operator | Version |
|---|---|---|---|
| zeroshell zeroshell | eq | 3.9.3 |
Related
jvn
jvn
JVN#44033918: Zeroshell vulnerable to OS command injection
2024-02-07 00:00:00
cvelist
cvelist
CVE-2020-29390
2020-11-30 17:24:17
nvd
nvd
CVE-2020-29390
2020-11-30 18:15:11
prion
prion
Command injection
2020-11-30 18:15:00
cve
cve
CVE-2020-29390
2020-11-30 18:15:11
checkpoint_advisories
checkpoint_advisories
Zeroshell Remote Code Execution (CVE-2020-29390)
2020-12-16 00:00:00