Radisys MRF - Command Injection Vulnerability

Exploit for cgi platform in category web applications Title: MRF Web Panel OS Command Injection Vendor: Radisys Vendor Homepage: http://www.radisys.com Product: MRF Web Panel SWMS Version: 9.0.1 CVE: CVE-2016-10043 CWE: CWE-78 Risk Level: High Discovery: Filippos Mastrogiannis, Loukas Alkis &...

PT-2017-3139

Name of the Vulnerable Software and Affected Versions Radisys MRF Web Panel SWMS version 9.0.1 Description An issue in the Radisys MRF Web Panel allows for OS command injection attacks through the MSM MACRO NAME parameter in the "/swms/ms.cgi" API endpoint. By using the pipe character |, attacker...

Radisys MRF - Command Injection

Radisys MRF - Command Injection Title: MRF Web Panel OS Command Injection Vendor: Radisys Vendor Homepage: http://www.radisys.com Product: MRF Web Panel SWMS Version: 9.0.1 CVE: CVE-2016-10043 CWE: CWE-78 Risk Level: High Discovery: Filippos Mastrogiannis, Loukas Alkis & Dimitrios Maragkos COSMOT...