Lucene search
MitreCVELIST:CVE-2020-13167HistoryMay 19, 2020 - 7:29 p.m.
CVE-2020-13167
2020-05-1919:29:41
mitre
www.cve.org
2
Netsweeper through 6.4.3 allows unauthenticated remote code execution because webadmin/tools/unixlogin.php (with certain Referer headers) launches a command line with client-supplied parameters, and allows injection of shell metacharacters.
Related
prion
prion
Design/Logic Flaw
2020-05-19 20:15:00
cve
cve
CVE-2020-13167
2020-05-19 20:15:10
nvd
nvd
CVE-2020-13167
2020-05-19 20:15:10
attackerkb
attackerkb
CVE-2020-13167
2020-05-19 00:00:00
metasploit
metasploit
Netsweeper WebAdmin unixlogin.php Python Code Injection
2020-05-12 13:34:20
nuclei
nuclei
Netsweeper <=6.4.3 - Python Code Injection
2020-07-07 19:26:15