dst-admin 命令注入漏洞

dst-admin is a web program written in Java by qinming99, an individual developer. A command injection vulnerability exists in dst-admin version 1.5.0, which stems from an unknown function in the file /home/sendBroadcast that can be injected via the parameter message...

PT-2023-16425 · Dst-Admin · Dst-Admin

Name of the Vulnerable Software and Affected Versions: dst-admin version 1.5.0 Description: A critical issue was found in dst-admin, affecting an unknown part of the file /home/masterConsole. The manipulation of the command argument leads to command injection. It is possible to initiate the attac...

PT-2023-16423 · Dst-Admin · Dst-Admin

Name of the Vulnerable Software and Affected Versions: dst-admin version 1.5.0 Description: A critical vulnerability was found in dst-admin, affecting an unknown functionality of the file /home/cavesConsole. The manipulation of the command argument leads to command injection. The attack can be...

PT-2023-16426 · Dst-Admin · Dst-Admin

Name of the Vulnerable Software and Affected Versions: dst-admin version 1.5.0 Description: A critical issue has been found, affecting unknown code in the file /home/sendBroadcast. The manipulation of the message argument leads to command injection. This issue can be exploited remotely...

PT-2023-16424 · Dst-Admin · Dst-Admin

Name of the Vulnerable Software and Affected Versions: dst-admin version 1.5.0 Description: A critical issue has been found in the software, affecting some unknown functionality of the file /home/kickPlayer. The manipulation of the userId argument leads to command injection. The attack can be...

CVE-2023-0649: Improper Neutralization of Special Elements used in a Command

A vulnerability has been found in dst-admin 1.5.0 and classified as critical. This vulnerability affects unknown code of the file /home/sendBroadcast. The manipulation of the argument message leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the...

CVE-2023-0648: Improper Neutralization of Special Elements used in a Command

A vulnerability, which was classified as critical, was found in dst-admin 1.5.0. This affects an unknown part of the file /home/masterConsole. The manipulation of the argument command leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

CVE-2023-0647: Improper Neutralization of Special Elements used in a Command

A vulnerability, which was classified as critical, has been found in dst-admin 1.5.0. Affected by this issue is some unknown functionality of the file /home/kickPlayer. The manipulation of the argument userId leads to command injection. The attack may be launched remotely. The exploit has been...

CVE-2023-0646: Improper Neutralization of Special Elements used in a Command

A vulnerability classified as critical was found in dst-admin 1.5.0. Affected by this vulnerability is an unknown functionality of the file /home/cavesConsole. The manipulation of the argument command leads to command injection. The attack can be launched remotely. The exploit has been disclosed ...

CVE-2021-44586

An issue was discovered in dst-admin v1.3.0. The product has an unauthorized arbitrary file download vulnerability that can expose sensitive information...

CVE-2021-44586

An issue was discovered in dst-admin v1.3.0. The product has an unauthorized arbitrary file download vulnerability that can expose sensitive information...

CVE-2021-44586

An issue was discovered in dst-admin v1.3.0. The product has an unauthorized arbitrary file download vulnerability that can expose sensitive information...

Arbitrary file deletion

An issue was discovered in dst-admin v1.3.0. The product has an unauthorized arbitrary file download vulnerability that can expose sensitive information...

CVE-2021-44586

An issue was discovered in dst-admin v1.3.0. The product has an unauthorized arbitrary file download vulnerability that can expose sensitive information...

CVE-2021-44586

CVE-2021-44586 concerns dst-admin v1.3.0, where an unauthorized arbitrary file download vulnerability can expose sensitive information. According to NVD, the issue has a Network attack vector with low complexity and no authentication required, exposing partial confidentiality (C:P) and no integri...

CVE-2021-44586

An issue was discovered in dst-admin v1.3.0. The product has an unauthorized arbitrary file download vulnerability that can expose sensitive information...

Dst-Admin 路径遍历漏洞

Dst-Admin is a Chinese administrative backend for Dont Starve Together Famine Online Edition for the Steam platform. A security vulnerability exists in Dst-Admin v1.3.0, which originates from an unauthorized download of arbitrary files and can expose sensitive information...

PT-2022-12177

Name of the Vulnerable Software and Affected Versions dst-admin version 1.3.0 Description The product has an unauthorized arbitrary file download vulnerability that can expose sensitive information. Recommendations For dst-admin version 1.3.0, update to a version that addresses the unauthorized...

CVE-2021-44586: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered in dst-admin v1.3.0. The product has an unauthorized arbitrary file download vulnerability that can expose sensitive information...