CVE-2023-5301

A vulnerability classified as critical was found in DedeCMS 5.7.111. This vulnerability affects the function AddMyAddon of the file albumadd.php. The manipulation of the argument albumUploadFiles leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed t...

CVE-2023-5301

CVE-2023-5301 affects DedeCMS 5.7.111, where the AddMyAddon function in album_add.php is vulnerable due to improper handling of the albumUploadFiles parameter, enabling OS command injection. The vulnerability is exploitable remotely and, per multiple sources, can lead to arbitrary command executi...

CVE-2023-5301 DedeCMS album_add.php AddMyAddon os command injection

A vulnerability classified as critical was found in DedeCMS 5.7.111. This vulnerability affects the function AddMyAddon of the file albumadd.php. The manipulation of the argument albumUploadFiles leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed t...

PT-2023-6087 · Fortinet · Fortiwlm

Name of the Vulnerable Software and Affected Versions: Fortinet FortiWLM versions 8.5.0 through 8.5.4 Fortinet FortiWLM versions 8.6.0 through 8.6.5 Description: The issue is related to an improper neutralization of special elements used in an OS command, also known as 'OS command injection'. Thi...

CVE-2023-3767

An OS command injection vulnerability has been found on EasyPHP Webserver affecting version 14.1. This vulnerability could allow an attacker to get full access to the system by sending a specially crafted exploit to the /index.php?zone=settings parameter...

Command injection

An OS command injection vulnerability has been found on EasyPHP Webserver affecting version 14.1. This vulnerability could allow an attacker to get full access to the system by sending a specially crafted exploit to the /index.php?zone=settings parameter...

Exploit for Improper Input Validation in Imagemagick

ImageTragickCVE-2023-34152 CV...

CVE-2023-3767

CVE-2023-3767 affects EasyPHP Webserver v14.1. An OS command injection flaw exists in the /index.php?zone=settings handler that an attacker can exploit to gain full system access. The root cause is improper handling of the settings parameter allowing arbitrary command execution. Documented impact...

Security Bulletin: IBM InfoSphere Information Server is vulnerable to OS command injection (CVE-2022-35717)

Summary An OS command injection vulnerability in InfoSphere Information Server was addressed. Vulnerability Details CVEID:CVE-2022-35717 DESCRIPTION: IBM InfoSphere Information Server 11.7 could allow a locally authenticated attacker to execute arbitrary commands on the system by sending a...

CVE-2023-23362 QTS, QuTS hero, QuTScloud

An OS command injection vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability allows remote authenticated users to execute commands via susceptible QNAP devices. We have already fixed the vulnerability in the following versions: QTS 5.0.1.2376 build...

CVE-2023-23362

CVE-2023-23362 is an OS command injection affecting QNAP QTS, QuTS Hero, QuTScloud. The issue allows remote authenticated users to execute commands via vulnerable QNAP devices. Public disclosures in the provided sources confirm the vulnerability and list fixed versions: QTS 5.0.1.2376 build 20230...

CVE-2023-28614

Freewill iFIS aka SMART Trade 20.01.01.04 allows OS Command Injection via shell metacharacters to a report page...

Command injection

Freewill iFIS aka SMART Trade 20.01.01.04 allows OS Command Injection via shell metacharacters to a report page...

CVE-2023-28614

Freewill iFIS aka SMART Trade 20.01.01.04 allows OS Command Injection via shell metacharacters to a report page...

CVE-2023-28614

Freewill iFIS aka SMART Trade 20.01.01.04 allows OS Command Injection via shell metacharacters to a report page...

CVE-2023-28614

CVE-2023-28614 affects Freewill iFIS (SMART Trade) 20.01.01.04. Description: OS Command Injection via shell metacharacters to a report page. Root cause: improper handling of shell metacharacters in the report page input leads to command execution. Impact per CVSS: Confidentiality, Integrity, and ...

OS Command Injection

cacti is vulnerable to OS Command Injection. The vulnerability exists in the snmp.php due to lack of parameter checks which allows an attacker to inject and execute arbitrary commands...

CVE-2023-39780

On ASUS RT-AX55 3.0.0.4.386.51598 devices, authenticated attackers can perform OS command injection via the /startapply.htm qosbwrulelist parameter. NOTE: for the similar "token-generated module" issue, see CVE-2023-41345; for the similar "token-refresh module" issue, see CVE-2023-41346; for the...

CVE-2023-39780

On ASUS RT-AX55 3.0.0.4.386.51598 devices, authenticated attackers can perform OS command injection via the /startapply.htm qosbwrulelist parameter. NOTE: for the similar “token-generated module” issue, see CVE-2023-41345; for the similar “token-refresh module” issue, see CVE-2023-41346; for the...

CVE-2023-4873

A vulnerability, which was classified as critical, was found in Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230906. Affected is an unknown function of the file /importexport.php. The manipulation of the argument sql leads to os command injection. It is...