3 matches found
CVE-2023-36103
Command Injection vulnerability in goform/SetIPTVCfg interface of Tenda AC15 V15.03.05.20 allows remote attackers to run arbitrary commands via crafted POST request...
CVE-2023-36103: Improper Neutralization of Special Elements used in a Command
Command Injection vulnerability in goform/SetIPTVCfg interface of Tenda AC15 V15.03.05.20 allows remote attackers to run arbitrary commands via crafted POST request...
PT-2024-12547
Name of the Vulnerable Software and Affected Versions Tenda AC15 version V15.03.05.20 Description A Command Injection issue exists in the goform/SetIPTVCfg interface, allowing remote attackers to execute arbitrary commands via a crafted POST request. The "goform/SetIPTVCfg" interface is vulnerabl...