CVE-2008-6816

Eaton MGEOPS Network Shutdown Module before 3.10 Build 13 allows remote attackers to execute arbitrary code by adding a custom action to the MGE frontend via paneactionbutton.php, and then executing this action via execaction.php...

EATON MGE Office Protection Systems Network Shutdown Module unauthorized access

Authentication bypass and code execution...

n.runs-SA-2008.009 - Eaton MGE OPS Network Shutdown Module - authentication bypass vulnerability and remote code execution

n.runs AG http://www.nruns.com/ securityatnruns.com n.runs-SA-2008.009 27-October-2008 Vendor: Eaton MGE office protection systems Affected Products: Network Shutdown Module version 3.10 Vulnerability: authentication bypass vulnerability and remote code execution Risk: High Vendor communication:...

Eaton Network Shutdown Module绕过认证漏洞

BUGTRAQ ID: 31933 Network Shutdown Module是EATON公司MGE办公保护系统中用于安全关机的软件。 用户无需认证便可以向Network Shutdown Module的MGE前端（paneactionbutton.php）添加自定义操作，包括执行任意命令。 Eaton Network Shutdown Module 3.10 Eaton ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://download.mgeops.com/explore/eng/network/netsol.htm...

Eaton Network Shutdown Module < 3.20 Authentication Bypass / Command Execution

According to its version number, the Network Shutdown Module install on the remote host is earlier than 3.20. It therefore reportedly fails to require authentication before allowing a remote attacker to add custom actions through the 'paneactionbutton.php' script and then execute them via the...