CVE-2022-48323

Sunlogin Sunflower Simplified aka Sunflower Simple and Personal 1.0.1.43315 is vulnerable to a path traversal issue. A remote and unauthenticated attacker can execute arbitrary programs on the victim host by sending a crafted HTTP request, as demonstrated by /check?cmd=ping../ followed by the...

Path traversal

Sunlogin Sunflower Simplified aka Sunflower Simple and Personal 1.0.1.43315 is vulnerable to a path traversal issue. A remote and unauthenticated attacker can execute arbitrary programs on the victim host by sending a crafted HTTP request, as demonstrated by /check?cmd=ping../ followed by the...

CVE-2022-48323

Sunlogin Sunflower Simplified (also known as Sunflower Simple and Personal) version 1.0.1.43315 is vulnerable to a path traversal issue. A remote and unauthenticated attacker can exploit this by sending a crafted HTTP request, such as using the /check?cmd=ping../ endpoint followed by a system pat...

CVE-2022-48323

Sunlogin Sunflower Simplified aka Sunflower Simple and Personal 1.0.1.43315 is vulnerable to a path traversal issue. A remote and unauthenticated attacker can execute arbitrary programs on the victim host by sending a crafted HTTP request, as demonstrated by /check?cmd=ping../ followed by the...

PT-2023-15701

Name of the Vulnerable Software and Affected Versions Sunlogin Sunflower Simplified aka Sunflower Simple and Personal version 1.0.1.43315 Description Sunlogin Sunflower Simplified aka Sunflower Simple and Personal version 1.0.1.43315 is susceptible to a path traversal issue. A remote,...

CVE-2022-48323: Improper Limitation of a Pathname to a Restricted Directory

Sunlogin Sunflower Simplified aka Sunflower Simple and Personal 1.0.1.43315 is vulnerable to a path traversal issue. A remote and unauthenticated attacker can execute arbitrary programs on the victim host by sending a crafted HTTP request, as demonstrated by /check?cmd=ping../ followed by the...

VulnCheck KEV: CVE-2022-48323

Sunlogin Sunflower Simplified aka Sunflower Simple and Personal 1.0.1.43315 is vulnerable to a path traversal issue. A remote and unauthenticated attacker can execute arbitrary programs on the victim host by sending a crafted HTTP request, as demonstrated by /check?cmd=ping../ followed by the...