2 matches found
Command injection
An OS Command Injection vulnerability in Snare Central before 7.4.5 allows remote authenticated attackers to inject arbitrary OS commands via the ServerConf/DataManagement/DiskManager.php FORMNASshare parameter...
9CVSS7.1AI score0.0223EPSS
SaveExploits0References1Affected Software1
CVE-2019-11364: Improper Neutralization of Special Elements used in an OS Command
An OS Command Injection vulnerability in Snare Central before 7.4.5 allows remote authenticated attackers to inject arbitrary OS commands via the ServerConf/DataManagement/DiskManager.php FORMNASshare parameter...
9CVSS6AI score0.0223EPSS
SaveExploits0References2
20