237 matches found
Command injection
An issue was discovered in DTS Monitoring 3.57.0. The parameter ip within the Ping check function is vulnerable to OS command injection blind...
Command injection
An issue was discovered in DTS Monitoring 3.57.0. The parameter options within the WGET check function is vulnerable to OS command injection blind...
CVE-2023-33269
DTS Monitoring 3.57.0 is affected by an OS command injection in the WGET check function, due to unsafe handling of the options parameter. CVSS 3.1/9.8 indicates a high-severity, network-based vulnerability with no user interaction. Some sources recommend disabling the WGET check until a patch is ...
CVE-2023-33272
CVE-2023-33272 affects DTS Monitoring 3.57.0. The vulnerability is an OS command injection (blind) in the Ping check function via the ip parameter. CVSS 3.1 base score 9.8 (CRITICAL) with NETWORK attack vector and no privileges required. Exploitation details are not provided in the available docu...
CVE-2023-33270
An issue was discovered in DTS Monitoring 3.57.0. The parameter url within the Curl check function is vulnerable to OS command injection blind...
CVE-2023-33272
An issue was discovered in DTS Monitoring 3.57.0. The parameter ip within the Ping check function is vulnerable to OS command injection blind...
CVE-2023-33272
An issue was discovered in DTS Monitoring 3.57.0. The parameter ip within the Ping check function is vulnerable to OS command injection blind...
DTS Monitoring Operating System Command Injection Vulnerability
DTS Monitoring is an information system monitoring platform from DTS Corporation. An operating system command injection vulnerability exists in DTS Monitoring version 3.57.0, which originates from the commonname parameter in the SSL certificate check function being susceptible to operating system...
CVE-2023-33269
An issue was discovered in DTS Monitoring 3.57.0. The parameter options within the WGET check function is vulnerable to OS command injection blind...
CVE-2023-33270
An issue was discovered in DTS Monitoring 3.57.0. The parameter url within the Curl check function is vulnerable to OS command injection blind...
CVE-2023-33271
CVE-2023-33271 affects DTS Monitoring 3.57.0. The vulnerability is in the SSL Certificate check function, where the common_name parameter is vulnerable to blind OS command injection. If exploitable, this could allow an attacker to execute commands on the affected system. Mitigations referenced in...
DTS Monitoring Operating System Command Injection Vulnerability
DTS Monitoring is an information system monitoring platform from DTS Corporation. An operating system command injection vulnerability exists in DTS Monitoring version 3.57.0, which originates from the port parameter in the SSL certificate checking function being susceptible to operating system...
DTS Monitoring Operating System Command Injection Vulnerability
DTS Monitoring is an information system monitoring platform from DTS Corporation. An OS command injection vulnerability exists in DTS Monitoring version 3.57.0, which stems from the url parameter in the Curl check function being susceptible to OS command injection...
PT-2023-24253 · Unknown · Dts Monitoring
Name of the Vulnerable Software and Affected Versions: DTS Monitoring version 3.57.0 Description: An issue was discovered in the parameter options within the WGET check function, which is vulnerable to OS command injection blind. Recommendations: For DTS Monitoring version 3.57.0, consider...
CVE-2023-33273
An issue was discovered in DTS Monitoring 3.57.0. The parameter url within the WGET check function is vulnerable to OS command injection blind...
CVE-2023-33268
CVE-2023-33268 affects DTS Monitoring 3.57.0. The vulnerability is in the SSL Certificate check function where the port parameter can be exploited to perform an OS command injection (blind). Impact details in connected sources align on the same issue; no exploit specifics or CVSS vectors beyond w...
DTS Monitoring Operating System Command Injection Vulnerability
DTS Monitoring is an information system monitoring platform from DTS Corporation. An operating system command injection vulnerability exists in DTS Monitoring version 3.57.0, which stems from the options parameter in the WGET check function being susceptible to operating system command injection...
CVE-2023-33269
An issue was discovered in DTS Monitoring 3.57.0. The parameter options within the WGET check function is vulnerable to OS command injection blind...
PT-2023-24255 · Unknown · Dts Monitoring
Name of the Vulnerable Software and Affected Versions: DTS Monitoring version 3.57.0 Description: An issue was discovered in the software where the url parameter within the Curl check function is vulnerable to OS command injection, specifically blind command injection. This means an attacker coul...
DTS Monitoring Operating System Command Injection Vulnerability
DTS Monitoring is an information system monitoring platform from DTS Corporation. An operating system command injection vulnerability exists in DTS Monitoring version 3.57.0, which stems from the url parameter in the WGET check function being susceptible to operating system command injection...