CVE-2021-34111: Improper Neutralization of Special Elements used in an OS Command

Thecus 4800Eco was discovered to contain a command injection vulnerability via the username parameter in /adm/setmain.php...

PT-2022-10322

Name of the Vulnerable Software and Affected Versions Thecus 4800Eco affected versions not specified Description A command injection issue was discovered via the username parameter in the "/adm/setmain.php" API endpoint. This allows for potential command execution. No information is provided abou...