Lucene search
K

CVE-2020-16152

🗓️ 14 Nov 2021 20:08:26Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 140 Views🌐 WEB

NetConfig UI admin interface allows PHP code execution via remote HTTP requests

Related
Detection
Refs
Paths
NVD
ParameterPositionPathDescriptionCWE
login_authrequest bodylogin.php5Log poisoning via /tmp/messages to enable RCECWE-829
miniHiveUIrequest bodylogin.php5Log poisoning via /tmp/messages to enable RCECWE-829
authselectrequest bodylogin.php5Log poisoning via /tmp/messages to enable RCECWE-829
userNamerequest bodylogin.php5Log poisoning via /tmp/messages to enable RCECWE-829
passwordrequest bodylogin.php5Log poisoning via /tmp/messages to enable RCECWE-829
_actionrequest bodyaction.php5LFI path traversal to access /tmp/messages for code executionCWE-829
debugrequest bodyaction.php5LFI path traversal to access /tmp/messages for code executionCWE-829
_pagerequest bodyaction.php5LFI path traversal to access /tmp/messages for code executionCWE-829

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation