PT-2022-9919

Name of the Vulnerable Software and Affected Versions NorthStar Club Management version 6.3 Description The issue allows remote unauthenticated users to inject and execute arbitrary system commands via the unsanitized user-controlled command and commandvalues parameters in cominput.jsp and...

CVE-2021-29393: Improper Neutralization of Special Elements used in an OS Command

Remote Code Execution in cominput.jsp and comoutput.jsp in Northstar Technologies Inc NorthStar Club Management 6.3 allows remote unauthenticated users to inject and execute arbitrary system commands via the unsanitized user-controlled "command" and "commandvalues" parameters...