CVE-2021-4473

Tianxin Internet Behavior Management System contains a command injection vulnerability in the Reporter component endpoint that allows unauthenticated attackers to execute arbitrary commands by supplying a crafted objClass parameter containing shell metacharacters and output redirection. Attackers...

VulnCheck KEV: CVE-2020-37123

Pinger 1.0 contains a remote code execution vulnerability that allows attackers to inject shell commands through the ping and socket parameters. Attackers can exploit the unsanitized input in ping.php to write arbitrary PHP files and execute system commands by appending shell metacharacters...

CVE-2020-37123

CVE-2020-37123 affects Pinger 1.0 and describes a remote code execution vulnerability. The issue arises from unsanitized input in ping.php, enabling an attacker to inject shell commands, write arbitrary PHP files, and execute system commands by appending shell metacharacters. The entry indicates ...