CVE-2021-21805

creationtimestamp| type| source ---|---|--- 2023-04-27 09:58:59+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-21805.yaml 2024-09-21 16:07:00+00:00| published-proof-of-concept| Telegram/PFuHmq-kFHJdhlJhe8Rm70ksRgJWMwxLf5kEr4GitGermQ...

Advantech R-SeeNet ping.php Command Injection (CVE-2021-21805)

A command injection vulnerability exists in Advantech R-SeeNet. The vulnerability is due to insufficient validation of the parameter in ping.php...

CVE-2021-21805

CVE-2021-21805 affects Advantech R-SeeNet v2.4.12. The ping.php script is vulnerable to remote OS command injection via specially crafted HTTP requests, enabling arbitrary commands execution without credentials. The Nuclei template and Red Hat/other feeds corroborate remote execution risk; report...