65 matches found
Abyss Web Server first-run console takeover log-as-CGI RCE
First-run console credential creation, bind access log as /bin/sh CGI, smuggle command via User-Agent, trigger via log URI fetch. """Abyss Web Server X1 2.16.22.0 - Missing Authentication for Console Credential Creation Reaching a Configuration-Write to Log-as-CGI Command Execution Chain CWE-306,...
6.1AI score
SaveExploits0References1
20