CVE-2020-14072

An issue was discovered in MK-AUTH 19.01. It allows command execution as root via shell metacharacters to /auth admin scripts...

CVE-2020-14412: Improper Neutralization of Special Elements used in an OS Command

NeDi 1.9C is vulnerable to Remote Command Execution. System-Snapshot.php improperly escapes shell metacharacters from a POST request. An attacker can exploit this by crafting an arbitrary payload any system commands that contains shell metacharacters via a POST request with a psw parameter. This...

CVE-2020-14072: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered in MK-AUTH 19.01. It allows command execution as root via shell metacharacters to /auth admin scripts...

CVE-2020-14414: Improper Neutralization of Special Elements used in an OS Command

NeDi 1.9C is vulnerable to Remote Command Execution. pwsec.php improperly escapes shell metacharacters from a POST request. An attacker can exploit this by crafting an arbitrary payload any system commands that contains shell metacharacters via a POST request with a pw parameter. This can also be...

PT-2020-13993

Name of the Vulnerable Software and Affected Versions NeDi version 1.9C Description The issue allows for Remote Command Execution due to improper escaping of shell metacharacters from a POST request in System-Snapshot.php. An attacker can exploit this by sending a crafted payload containing shell...

PT-2020-13877

Name of the Vulnerable Software and Affected Versions MK-AUTH version 19.01 Description An issue in MK-AUTH allows command execution as root via shell metacharacters to /auth admin scripts. Recommendations For MK-AUTH version 19.01, consider restricting access to the /auth admin scripts as a...

CVE-2020-14950

aaPanel through 6.6.6 allows remote authenticated users to execute arbitrary commands via shell metacharacters in a modified /system?action=ServiceAdmin request start, stop, or restart to the setting menu of Sotfware Store...

CVE-2020-14950

aaPanel through 6.6.6 allows remote authenticated users to execute arbitrary commands via shell metacharacters in a modified /system?action=ServiceAdmin request start, stop, or restart to the setting menu of Sotfware Store...

CVE-2020-14950: Improper Neutralization of Special Elements used in an OS Command

aaPanel through 6.6.6 allows remote authenticated users to execute arbitrary commands via shell metacharacters in a modified /system?action=ServiceAdmin request start, stop, or restart to the setting menu of Sotfware Store...

PT-2020-14084

Name of the Vulnerable Software and Affected Versions aaPanel versions 6.6.6 and earlier Description The issue allows remote authenticated users to execute arbitrary commands via shell metacharacters in a modified "/system?action=ServiceAdmin" request to the setting menu of Software Store. This c...

CVE-2020-13976

An issue was discovered in DD-WRT through 16214. The Diagnostic page allows remote attackers to execute arbitrary commands via shell metacharacters in the host field of the ping command. Exploitation through CSRF might be possible. NOTE: software maintainers consider the report invalid because it...

Command injection

An issue was discovered in DD-WRT through 16214. The Diagnostic page allows remote attackers to execute arbitrary commands via shell metacharacters in the host field of the ping command. Exploitation through CSRF might be possible. NOTE: software maintainers consider the report invalid because it...

CVE-2020-13976

An issue was discovered in DD-WRT through 16214. The Diagnostic page allows remote attackers to execute arbitrary commands via shell metacharacters in the host field of the ping command. Exploitation through CSRF might be possible. NOTE: software maintainers consider the report invalid because it...

CVE-2020-13976

An issue was discovered in DD-WRT through 16214. The Diagnostic page allows remote attackers to execute arbitrary commands via shell metacharacters in the host field of the ping command. Exploitation through CSRF might be possible. NOTE: software maintainers consider the report invalid because it...

CVE-2020-13976

CVE-2020-13976 affects DD-WRT up to build 16214. The Diagnostic page allows remote attackers with administrative privileges to execute arbitrary commands via shell metacharacters in the host field of the ping command; CSRF exploitation might be possible. Public issuances (NVD, Red Hat, PRION, CVE...

CVE-2020-13976: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered in DD-WRT through 16214. The Diagnostic page allows remote attackers to execute arbitrary commands via shell metacharacters in the host field of the ping command. Exploitation through CSRF might be possible. NOTE: software maintainers consider the report invalid because it...

CVE-2014-7173

FarLinX X25 Gateway through 2014-09-25 allows command injection via shell metacharacters to sysSaveMonitorData.php, fsx25MonProxy.php, syseditdate.php, iframeupload.php, or sysRestoreX25Cplt.php...

Command injection

FarLinX X25 Gateway through 2014-09-25 allows command injection via shell metacharacters to sysSaveMonitorData.php, fsx25MonProxy.php, syseditdate.php, iframeupload.php, or sysRestoreX25Cplt.php...

CVE-2014-7173

The CVE-2014-7173 case affects FarLinX X25 Gateway (through 2014-09-25). The vulnerability is a OS command-injection issue via shell metacharacters in several scripts: sysSaveMonitorData.php, fsx25MonProxy.php, syseditdate.php, iframeupload.php, and sysRestoreX25Cplt.php. Root cause and impact ar...

CVE-2014-7173

FarLinX X25 Gateway through 2014-09-25 allows command injection via shell metacharacters to sysSaveMonitorData.php, fsx25MonProxy.php, syseditdate.php, iframeupload.php, or sysRestoreX25Cplt.php...