Zeroshell 3.9.3 - Command Injection

Zeroshell 3.9.3 contains a command injection vulnerability in the /cgi-bin/kerbynet StartSessionSubmit parameter that could allow an unauthenticated attacker to execute a system command by using shell metacharacters and the %0a character. id: CVE-2020-29390 info: name: Zeroshell 3.9.3 - Command...

VulnCheck KEV: CVE-2020-29390

Zeroshell 3.9.3 contains a command injection vulnerability in the /cgi-bin/kerbynet StartSessionSubmit parameter that could allow an unauthenticated attacker to execute a system command by using shell metacharacters and the %0a character...

CVE-2020-29390

Zeroshell 3.9.3 contains a command injection vulnerability in the /cgi-bin/kerbynet StartSessionSubmit parameter that could allow an unauthenticated attacker to execute a system command by using shell metacharacters and the %0a character...

Zeroshell Remote Code Execution (CVE-2020-29390)

A remote code execution vulnerability exists in Zeroshell. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

CVE-2020-29390

creationtimestamp| type| source ---|---|--- 2020-11-30 20:53:18+00:00| seen| https://t.me/cibsecurity/16938 2025-07-08 21:02:36+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lti75j27o32x 2025-07-16 09:42:13+00:00| confirmed|...

CVE-2020-29390

The Zeroshell Linux distribution (version 3.9.3 and earlier) is vulnerable to an OS command injection vulnerability (CWE-78) in its web interface. The flaw exists within the /cgi-bin/kerbynet StartSessionSubmit parameter, where an unauthenticated attacker can execute arbitrary system commands by ...