CVE-2021-4304

A vulnerability was found in eprintsug ulcc-core. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file cgi/toolbox/toolbox. The manipulation of the argument password leads to command injection. The attack can be launched remotely. The patch is...

CVE-2021-4304: Improper Neutralization of Special Elements used in a Command

A vulnerability was found in eprintsug ulcc-core. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file cgi/toolbox/toolbox. The manipulation of the argument password leads to command injection. The attack can be launched remotely. The patch is...

CVE-2021-26704

EPrints 3.4.2 allows remote attackers to execute arbitrary commands via crafted input to the verb parameter in a cgi/toolbox/toolbox URI...

CVE-2021-26704: Improper Neutralization of Special Elements used in an OS Command

EPrints 3.4.2 allows remote attackers to execute arbitrary commands via crafted input to the verb parameter in a cgi/toolbox/toolbox URI...

PT-2021-17101

Name of the Vulnerable Software and Affected Versions EPrints version 3.4.2 Description The issue allows remote attackers to execute arbitrary commands via crafted input to the verb parameter in a "cgi/toolbox/toolbox" URI. This can lead to unauthorized access and control of the system...