Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added 2026/02/24 1:44 a.m.4 views

CVE-2026-2956

A security flaw has been discovered in qinming99 dst-admin up to 1.5.0. This affects the function revertBackup of the file /home/restore. The manipulation of the argument Name results in command injection. The attack can be launched remotely. The exploit has been released to the public and may be...

8.8CVSS6.3AI score0.0471EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2026/02/22 10:2 p.m.4 views

CVE-2026-2956 qinming99 dst-admin restore revertBackup command injection

A security flaw has been discovered in qinming99 dst-admin up to 1.5.0. This affects the function revertBackup of the file /home/restore. The manipulation of the argument Name results in command injection. The attack can be launched remotely. The exploit has been released to the public and may be...

6.5CVSS6.3AI score0.0471EPSS
Exploits1References4
ATTACKERKB
ATTACKERKB
added 2026/02/22 10:2 p.m.4 views

CVE-2026-2956

A security flaw has been discovered in qinming99 dst-admin up to 1.5.0. This affects the function revertBackup of the file /home/restore. The manipulation of the argument Name results in command injection. The attack can be launched remotely. The exploit has been released to the public and may be...

6.5CVSS6.3AI score0.0471EPSS
Exploits1References4Affected Software1
CVE
CVE
added 2026/02/22 10:2 p.m.13 views

CVE-2026-2956

CVE-2026-2956 affects qinming99 dst-admin up to 1.5.0. The issue is a command injection in the revertBackup function located in /home/restore, triggered by manipulating the Name argument. It supports remote attacker access and has publicly available exploit code. Public advisories indicate versio...

8.8CVSS6.4AI score0.0471EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2026/02/22 10:2 p.m.22 views

CVE-2026-2956 qinming99 dst-admin restore revertBackup command injection

A security flaw has been discovered in qinming99 dst-admin up to 1.5.0. This affects the function revertBackup of the file /home/restore. The manipulation of the argument Name results in command injection. The attack can be launched remotely. The exploit has been released to the public and may be...

6.5CVSS0.0471EPSS
Exploits1References4
CNNVD
CNNVD
added 2026/02/22 12:0 a.m.5 views

dst-admin 命令注入漏洞

dst-admin is a web program developed by Qinming99, written in the Java language. Versions of dst-admin prior to 1.5.0 have a command injection vulnerability. This vulnerability stems from incorrect handling of the parameter Name in the revertBackup function located in the /home/restore file, whic...

8.8CVSS6.6AI score0.0471EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2026/02/22 12:0 a.m.5 views

PT-2026-21467

Name of the Vulnerable Software and Affected Versions qinming99 dst-admin versions up to 1.5.0 Description A security flaw exists in qinming99 dst-admin up to version 1.5.0. The issue is related to command injection in the revertBackup function located in the /home/restore file. The Name argument...

6.5CVSS6.3AI score0.0471EPSS
Exploits1References9
Rows per page
Query Builder