CVE-2017-16608

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Netgain Enterprise Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within exec.jsp. The issue results from the lack of proper validation of a...

CVE-2017-16608

Netgain Enterprise Manager is vulnerable to a remote code execution (RCE) vulnerability (formerly ZDI-CAN-4749 ) due to improper validation of a user-supplied string before it is used to execute a system call. The flaw is located specifically within the exec.jsp component. Because authentication ...