Code injection

Seagate BlackArmor NAS allows remote attackers to execute arbitrary code via the session parameter to localhost/backupmgt/localJob.php or the authname parameter to localhost/backupmgmt/preconnectcheck.php...

CVE-2014-3206: Improper Input Validation

Seagate BlackArmor NAS allows remote attackers to execute arbitrary code via the session parameter to localhost/backupmgt/localJob.php or the authname parameter to localhost/backupmgmt/preconnectcheck.php...

Seagate BlackArmor NAS Command Execution

The vulnerability of the getAlias.php script backupmgt/getAlias.php of the Seagate BlackArmor NAS network storage software is related to the failure to eliminate special elements used in commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary shell commands using HTT...

CVE-2013-6924

Seagate BlackArmor NAS devices with firmware sg2000-2000.1331 allow remote attackers to execute arbitrary commands via shell metacharacters in the ip parameter to backupmgt/getAlias.php...

CVE-2013-6924: Improper Neutralization of Special Elements used in a Command

Seagate BlackArmor NAS devices with firmware sg2000-2000.1331 allow remote attackers to execute arbitrary commands via shell metacharacters in the ip parameter to backupmgt/getAlias.php...

PT-2014-2001

Name of the Vulnerable Software and Affected Versions Seagate BlackArmor NAS affected versions not specified Description The issue is related to the backupmgt/pre connect check.php component of the Seagate BlackArmor NAS, which contains a hard-coded password for a backdoor user. This could allow ...

PT-2014-1989

Name of the Vulnerable Software and Affected Versions Seagate BlackArmor NAS versions sg2000-2000.1331 Description The issue is related to the failure to neutralize special elements used in a command in the getAlias.php script of the Seagate BlackArmor NAS network storage microprogram. This can b...