4 matches found
CVE-2021-34111
Thecus 4800Eco was discovered to contain a command injection vulnerability via the username parameter in /adm/setmain.php...
CVE-2021-34111
Thecus 4800Eco was discovered to contain a command injection vulnerability via the username parameter in /adm/setmain.php...
Command injection
Thecus 4800Eco was discovered to contain a command injection vulnerability via the username parameter in /adm/setmain.php...
CVE-2021-34111
The CVE-2021-34111 entry describes a command-injection vulnerability in Thecus 4800Eco, exploitable via the username parameter in /adm/setmain.php. CVSS v3.1 base score 9.8 (CRITICAL) with network access, no authentication, and no user interaction. The connected documents confirm the affected pro...