CVE-2021-42897

A remote command execution RCE vulnerability was found in FeMiner wms V1.0 in /wms/src/system/datarec.php. The $POSTrname is directly passed into the $mysqlstr and is executed by exec...

CVE-2021-42897

A remote command execution RCE vulnerability was found in FeMiner wms V1.0 in /wms/src/system/datarec.php. The $POSTrname is directly passed into the $mysqlstr and is executed by exec...

Command injection

A remote command execution RCE vulnerability was found in FeMiner wms V1.0 in /wms/src/system/datarec.php. The $POSTrname is directly passed into the $mysqlstr and is executed by exec...

CVE-2021-42897

FeMiner wms v1.0 is affected by CVE-2021-42897. The vulnerability exists in /wms/src/system/datarec.php where the POST parameter $_POST[r_name] is directly passed into $mysqlstr and then executed by exec, enabling remote code execution over the network. The issue is described as a command injecti...

CVE-2021-42897

A remote command execution RCE vulnerability was found in FeMiner wms V1.0 in /wms/src/system/datarec.php. The $POSTrname is directly passed into the $mysqlstr and is executed by exec...

PT-2022-11739

Name of the Vulnerable Software and Affected Versions FeMiner wms version V1.0 Description A remote command execution issue was found in FeMiner wms. The vulnerability is located in /wms/src/system/datarec.php, where the r name variable from the $ POST request is directly passed into the $mysqlst...

FeMiner wms 操作系统命令注入漏洞

FeMiner wms is a repository management system for individual developers of Front End Miner FeMiner in China. FeMiner wms version 1.0 suffers from an operating system command injection vulnerability that stems from a Remote Command Execution RCE vulnerability found in /wms/src/system/datarec.php...

CVE-2021-42897: Improper Neutralization of Special Elements used in an OS Command

A remote command execution RCE vulnerability was found in FeMiner wms V1.0 in /wms/src/system/datarec.php. The $POSTrname is directly passed into the $mysqlstr and is executed by exec...

CVE-2022-23158

Wyse Device Agent version 14.6.1.4 and below contain a sensitive data exposure vulnerability. A local authenticated user with standard privilege could potentially exploit this vulnerability and provide incorrect port information and get connected to valid WMS server...

CVE-2022-23156

Wyse Device Agent version 14.6.1.4 and below contain an Improper Authentication vulnerability. A malicious user could potentially exploit this vulnerability by providing invalid input in order to obtain a connection to WMS server...

CVE-2022-23157

Wyse Device Agent version 14.6.1.4 and below contain a sensitive data exposure vulnerability. A authenticated malicious user could potentially exploit this vulnerability in order to view sensitive information from the WMS Server...

Authentication flaw

Wyse Device Agent version 14.6.1.4 and below contain an Improper Authentication vulnerability. A malicious user could potentially exploit this vulnerability by providing invalid input in order to obtain a connection to WMS server...

Design/Logic Flaw

Wyse Device Agent version 14.6.1.4 and below contain a sensitive data exposure vulnerability. A local authenticated user with standard privilege could potentially exploit this vulnerability and provide incorrect port information and get connected to valid WMS server...

Design/Logic Flaw

Wyse Device Agent version 14.6.1.4 and below contain a sensitive data exposure vulnerability. A authenticated malicious user could potentially exploit this vulnerability in order to view sensitive information from the WMS Server...

CVE-2022-23158

CVE-2022-23158 affects Dell Wyse Device Agent (version 14.6.1.4 and earlier). A local authenticated user with standard privileges could exploit a data-exposure flaw to obtain incorrect port information and connect to a valid WMS server, exposing sensitive information. Public details in NVD/NCSC n...

CVE-2022-23158

Wyse Device Agent version 14.6.1.4 and below contain a sensitive data exposure vulnerability. A local authenticated user with standard privilege could potentially exploit this vulnerability and provide incorrect port information and get connected to valid WMS server...

CVE-2022-23157

Wyse Device Agent version 14.6.1.4 and below contain a sensitive data exposure vulnerability. A authenticated malicious user could potentially exploit this vulnerability in order to view sensitive information from the WMS Server...

CVE-2022-23157

Affected product : Dell Wyse Device Agent. Versions : 14.6.1.4 and earlier. Vulnerability : sensitive data exposure where an authenticated, local attacker could view sensitive information from the WMS Server. The issue is documented across multiple sources with consistent description of a local a...

CVE-2022-23156

Wyse Device Agent version 14.6.1.4 and below contain an Improper Authentication vulnerability. A malicious user could potentially exploit this vulnerability by providing invalid input in order to obtain a connection to WMS server...

PT-2022-15884

Name of the Vulnerable Software and Affected Versions Wyse Device Agent versions 14.6.1.4 and below Description The issue is related to an Improper Authentication vulnerability. A malicious user could potentially exploit this by providing invalid input to obtain a connection to the WMS server...