CVE-2016-10043: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered in Radisys MRF Web Panel SWMS 9.0.1. The MSMMACRONAME POST parameter in /swms/ms.cgi was discovered to be vulnerable to OS command injection attacks. It is possible to use the pipe character | to inject arbitrary OS commands and retrieve the output in the application's...

PT-2017-3139

Name of the Vulnerable Software and Affected Versions Radisys MRF Web Panel SWMS version 9.0.1 Description An issue in the Radisys MRF Web Panel allows for OS command injection attacks through the MSM MACRO NAME parameter in the "/swms/ms.cgi" API endpoint. By using the pipe character |, attacker...