CVE-2022-50691

🗓️ 30 Dec 2025 22:41:33Reported by VulnCheckType

cve🔗 web.nvd.nist.gov👁 5 Views🌐 WEB

MiniDVBLinux 5.4 remote root command execution via /tpl/commands.sh unauthenticated command parameter.

Reporter	Title	Published	Views	Family All 10
GithubExploit	Exploit for OS Command Injection in Minidvblinux	12 Jan 202618:42	–	githubexploit
Circl	CVE-2022-50691	31 Dec 202521:02	–	circl
CNNVD	MiniDVBLinux 安全漏洞	30 Dec 202500:00	–	cnnvd
Cvelist	CVE-2022-50691 MiniDVBLinux 5.4 Remote Root Command Execution via commands.sh	30 Dec 202522:41	–	cvelist
EUVD	EUVD-2022-55944	31 Dec 202500:31	–	euvd
NVD	CVE-2022-50691	30 Dec 202523:15	–	nvd
OSV	CVE-2022-50691	30 Dec 202523:15	–	osv
Positive Technologies	PT-2025-54230	30 Dec 202500:00	–	ptsecurity
Vulnrichment	CVE-2022-50691 MiniDVBLinux 5.4 Remote Root Command Execution via commands.sh	30 Dec 202522:41	–	vulnrichment
Zero Science Lab	MiniDVBLinux 5.4 Remote Root Command Execution Vulnerability	16 Oct 202200:00	–	zeroscience

NVD

Node

minidvblinux minidvblinuxMatch5.4

[
  {
    "defaultStatus": "unaffected",
    "product": "MiniDVBLinux",
    "vendor": "MiniDVBLinux",
    "versions": [
      {
        "lessThanOrEqual": "5.4",
        "status": "affected",
        "version": "Unknown",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
zeroscience	www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5718.php
vulncheck	www.vulncheck.com/advisories/minidvblinux-remote-root-command-execution-via-commandssh
packetstormsecurity	www.packetstormsecurity.com/files/168749/

Parameter	Position	Path	Description	CWE
command	query param	/tpl/commands.sh	OS command injection vulnerability allowing unauthenticated remote code execution via the 'command' GET parameter on /tpl/commands.sh	CWE-78

14 May 2026 02:06Current

8High risk

Vulners AI Score8

CVSS 49.3

CVSS 3.19.8

EPSS0.00457

SSVC

CWE-78