7 matches found
CVE-2024-44623
CVE-2024-44623 In SPX-GC 1.3.0v and below versions, user-controlled input was passed in the exec function of the childprocess module without any sanitization, leading to unauthenticated blind remote code execution. Vulnerability In /routes/routes-api.js, user input received from file param and...
CVE-2024-44623
An issue in TuomoKu SPx-GC v.1.3.0 and before allows a remote attacker to execute arbitrary code via the childprocess.js function...
CVE-2024-44623
The CVE-2024-44623 entry has concrete technical details in connected data: SPX-GC (TuomoKu) versions <= 1.3.0 are affected. The root cause is the use of unsanitized user input passed to the Node.js child_process.exec function in routes/routes-api.js, enabling unauthenticated remote code execut...
CVE-2024-44623
An issue in TuomoKu SPx-GC v.1.3.0 and before allows a remote attacker to execute arbitrary code via the childprocess.js function...
CVE-2024-44623
An issue in TuomoKu SPx-GC v.1.3.0 and before allows a remote attacker to execute arbitrary code via the childprocess.js function...
