3 matches found
Command injection
An OS Command Injection vulnerability in Snare Central before 7.4.5 allows remote authenticated attackers to inject arbitrary OS commands via the ServerConf/DataManagement/DiskManager.php FORMNASshare parameter...
PT-2019-12259
Name of the Vulnerable Software and Affected Versions Snare Central versions prior to 7.4.5 Description The issue allows remote authenticated attackers to inject arbitrary OS commands. This is achieved via the FORMNAS share parameter in the ServerConf/DataManagement/DiskManager.php file...
CVE-2019-11364: Improper Neutralization of Special Elements used in an OS Command
An OS Command Injection vulnerability in Snare Central before 7.4.5 allows remote authenticated attackers to inject arbitrary OS commands via the ServerConf/DataManagement/DiskManager.php FORMNASshare parameter...