CVE-2021-34111

Thecus 4800Eco was discovered to contain a command injection vulnerability via the username parameter in /adm/setmain.php...

CVE-2021-34111

Thecus 4800Eco was discovered to contain a command injection vulnerability via the username parameter in /adm/setmain.php...

Command injection

Thecus 4800Eco was discovered to contain a command injection vulnerability via the username parameter in /adm/setmain.php...

CVE-2021-34111

The CVE-2021-34111 entry describes a command-injection vulnerability in Thecus 4800Eco, exploitable via the username parameter in /adm/setmain.php. CVSS v3.1 base score 9.8 (CRITICAL) with network access, no authentication, and no user interaction. The connected documents confirm the affected pro...

CVE-2021-34111: Improper Neutralization of Special Elements used in an OS Command

Thecus 4800Eco was discovered to contain a command injection vulnerability via the username parameter in /adm/setmain.php...

PT-2022-10322

Name of the Vulnerable Software and Affected Versions Thecus 4800Eco affected versions not specified Description A command injection issue was discovered via the username parameter in the "/adm/setmain.php" API endpoint. This allows for potential command execution. No information is provided abou...