2 matches found
Command injection
In TOTOLINK X6000RFirmware V9.4.0cu.852B20230719, the shttpd file sub415534 function obtains fields from the front-end, connects them through the snprintf function, and passes them to the CsteSystem function, resulting in a command execution vulnerability...
7.5CVSS7.4AI score0.01693EPSS
SaveExploits1References2Affected Software1
CVE-2023-48801: Improper Neutralization of Special Elements used in a Command
In TOTOLINK X6000RFirmware V9.4.0cu.852B20230719, the shttpd file sub415534 function obtains fields from the front-end, connects them through the snprintf function, and passes them to the CsteSystem function, resulting in a command execution vulnerability...
9.8CVSS8.2AI score0.01693EPSS
SaveExploits1References2
20