Lucene search
+L

5 matches found

CNVD
CNVD
•added 2018/08/30 12:00 a.m.•12 views

Mutiny Monitoring Appliance Command Injection Vulnerability

Mutiny Monitoring Appliance is a network monitoring appliance from Mutiny UK. A command injection vulnerability exists in the maintenance.cgi file in versions prior to Mutiny Monitoring Appliance 6.1.0-5263. An attacker can use this vulnerability to inject arbitrary commands into the file name...

8.8CVSS9.1AI score0.04757EPSS
SaveExploits0References1
NVD
NVD
•added 2018/08/28 5:29 p.m.•17 views

CVE-2018-15529

A command injection vulnerability in maintenance.cgi in Mutiny "Monitoring Appliance" before 6.1.0-5263 allows authenticated users, with access to the admin interface, to inject arbitrary commands within the filename of a system upgrade upload...

8.8CVSS8.8AI score0.04757EPSS
SaveExploits0References4
Prion
Prion
•added 2018/08/28 5:29 p.m.•19 views

Command injection

A command injection vulnerability in maintenance.cgi in Mutiny "Monitoring Appliance" before 6.1.0-5263 allows authenticated users, with access to the admin interface, to inject arbitrary commands within the filename of a system upgrade upload...

6.5CVSS8.8AI score0.04757EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
•added 2018/08/28 12:00 a.m.•2 views

PT-2018-13066

Name of the Vulnerable Software and Affected Versions Mutiny Monitoring Appliance versions prior to 6.1.0-5263 Description A command injection issue exists in the maintenance.cgi component, allowing authenticated users with admin interface access to inject arbitrary commands within the filename o...

8.8CVSS0.04757EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/08/28 12:00 a.m.•8 views

CVE-2018-15529: Improper Neutralization of Special Elements used in an OS Command

A command injection vulnerability in maintenance.cgi in Mutiny "Monitoring Appliance" before 6.1.0-5263 allows authenticated users, with access to the admin interface, to inject arbitrary commands within the filename of a system upgrade upload...

8.8CVSS7.9AI score0.04757EPSS
SaveExploits0References2
Rows per page
Query Builder