Command injection

EyesOfNetwork eonweb through 5.3-11 allows Remote Command Execution by authenticated users via shell metacharacters in the nagiospath parameter to lilac/export.php, as demonstrated by %26%26+curl to insert an "&& curl" substring for the shell...

CVE-2021-33525

Affected software: EyesOfNetwork eonweb (version up to 5.3-11, earlier). Vulnerability: Remote Command Execution via shell metacharacters in the nagios_path parameter to lilac/export.php; demonstrated by injecting an ‘&& curl’ sequence. Actors / access: Exploitable by authenticated users (no user...

EyesOfNetwork 操作系统命令注入漏洞

eonweb is the web interface for EyesOfNetwork. A remote command execution vulnerability exists in EyesOfNetwork eonweb version 5.3-11 and earlier. An attacker can exploit this vulnerability to execute commands via shell metacharacters in the nagiospath parameter of lilac/export.php...

CVE-2021-32305

WebSVN before 2.6.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the search parameter...

Code injection

WebSVN before 2.6.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the search parameter...

websvn 操作系统命令注入漏洞

websvn is a software application. An online Subversion repository viewer. A security vulnerability exists in WebSVN versions prior to 2.6.1 that allows remote attackers to execute arbitrary commands via shell metacharacters in search parameters...

CVE-2021-28151

Hongdian H8922 3.0.5 devices allow OS command injection via shell metacharacters into the ip-address aka Destination field to the tools.cgi ping command, which is accessible with the username guest and password guest...

CVE-2021-28151

Hongdian H8922 3.0.5 devices allow OS command injection via shell metacharacters into the ip-address aka Destination field to the tools.cgi ping command, which is accessible with the username guest and password guest...

CVE-2021-28151

Hongdian H8922 3.0.5 devices are vulnerable to remote command injection in tools.cgi ping via shell metacharacters in the ip-address (Destination) field, accessible with guest/guest credentials. The Nuclei template and other sources confirm that an attacker can execute arbitrary commands on the d...

CVE-2021-29369

The gnuplot package prior to version 0.1.0 for Node.js allows code execution via shell metacharacters in Gnuplot commands...

CVE-2021-29369

The gnuplot package prior to version 0.1.0 for Node.js allows code execution via shell metacharacters in Gnuplot commands...

Command injection

The gnuplot package prior to version 0.1.0 for Node.js allows code execution via shell metacharacters in Gnuplot commands...

CVE-2021-29369

The CVE-2021-29369 entry concerns the gnuplot package for Node.js. Affected software: the gnuplot package prior to version 0.1.0. Vulnerable component: execution of Gnuplot commands via shell metacharacters (code execution). Root cause: shell metacharacter handling in the package allows injection...

gnuplot 操作系统命令注入漏洞

gnuplot is an interactive command-line tool that allows users to enter commands to convert data and data functions into easily viewable planar or three-dimensional shapes. gnuplot is a command-line interactive tool that allows users to enter commands to convert data and data functions into easily...

CVE-2021-30233

The api/ZRIptv/setIptvInfo interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the iptvvlan parameter...

CVE-2021-30232

The api/ZRIGMP/setIGMPPROXY interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the IGMPPROXYWANCONNECT parameter...

CVE-2021-30231

The api/zrDm/setZRElink interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the bssaddr, abiaddr, devtoken, devid, elinksync, or elinkprocenable parameter...

CVE-2021-30234

The api/ZRIGMP/setMLDPROXY interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the MLDPROXYWANCONNECT parameter...

CVE-2021-30232

The api/ZRIGMP/setIGMPPROXY interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the IGMPPROXYWANCONNECT parameter...

CVE-2021-30229

The api/zrDm/setzrDm interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the dmenable, AppKey, or Pwd parameter...