342 matches found
CVE-2021-28144
prog.cgi on D-Link DIR-3060 devices before 1.11b04 HF2 allows remote authenticated users to inject arbitrary commands in an admin or root context because SetVirtualServerSettings calls CheckArpTables, which calls popen unsafely...
8.7AI score0.06009EPSS
SaveExploits4References4
CVE-2021-28144: Improper Neutralization of Special Elements used in an OS Command
prog.cgi on D-Link DIR-3060 devices before 1.11b04 HF2 allows remote authenticated users to inject arbitrary commands in an admin or root context because SetVirtualServerSettings calls CheckArpTables, which calls popen unsafely...
9CVSS5.9AI score0.06009EPSS
SaveExploits4References2
20