CVE-2017-16602

The NetGain Systems Enterprise Manager (specifically version 7.2.730 build 1034 ) is vulnerable to a command injection flaw in the org.apache.jsp.u.jsp.tools.exec_jsp servlet. The root cause is the failure to properly validate a user-supplied string before it is used to execute a system call duri...

NetGain Systems Enterprise Manager exec_jsp Command Execution (CVE-2017-16602)

A command execution vulnerability exists in NetGain Systems Enterprise Manager. The vulnerability is due improper validation of command HTTP parameter. A remote, authenticated attacker can exploit this vulnerability by sending crafted requests to a vulnerable server...