CVE-2021-47816

Thecus N4800Eco NAS Server Control Panel contains a command injection vulnerability that allows authenticated attackers to execute arbitrary system commands through user management endpoints. Attackers can inject commands via username and batch user creation parameters to execute shell commands...

CVE-2021-47816

CVE-2021-47816 affects Thecus N4800Eco NAS Server Control Panel. The vulnerability is a command injection flaw in the user management endpoints that allows authenticated attackers to inject commands via username and batch user creation parameters, enabling execution of shell commands with adminis...

CVE-2021-47816 Thecus N4800Eco Nas Server Control Panel - Command Injection

Thecus N4800Eco NAS Server Control Panel contains a command injection vulnerability that allows authenticated attackers to execute arbitrary system commands through user management endpoints. Attackers can inject commands via username and batch user creation parameters to execute shell commands...

CVE-2021-47816

Thecus N4800Eco NAS Server Control Panel contains a command injection vulnerability that allows authenticated attackers to execute arbitrary system commands through user management endpoints. Attackers can inject commands via username and batch user creation parameters to execute shell commands...

PT-2026-3274

Thecus N4800Eco NAS Server Control Panel contains a command injection vulnerability that allows authenticated attackers to execute arbitrary system commands through user management endpoints. Attackers can inject commands via username and batch user creation parameters to execute shell commands...

Thecus N4800Eco Nas Server Control Panel: Operating System Command Injection Vulnerability

The Thecus N4800Eco Nas Server Control Panel is a NAS control panel developed by Thecus Corporation. The Thecus N4800Eco Nas Server Control Panel has a vulnerability related to operating system command injection. This vulnerability stems from commands executed by user-defined endpoints, which may...

CVE-2021-47816: Improper Neutralization of Special Elements used in an OS Command

Thecus N4800Eco NAS Server Control Panel contains a command injection vulnerability that allows authenticated attackers to execute arbitrary system commands through user management endpoints. Attackers can inject commands via username and batch user creation parameters to execute shell commands...

EUVD-2013-5506

Malware in sbrugna...

EUVD-2021-20774

Malware in sbrugna...

EUVD-2013-5508

Malware in sbrugna...

EUVD-2008-0811

Malware in sbrugna...

EUVD-2013-5507

Malware in sbrugna...

CVE-2021-34111

Thecus 4800Eco was discovered to contain a command injection vulnerability via the username parameter in /adm/setmain.php...

ARCHISITE Thecus 4800Eco Command Injection Vulnerability

ARCHISITE Thecus 4800Eco is a server from ARCHISITE Japan. ARCHISITE Thecus 4800Eco is vulnerable to command injection, which can be exploited by attackers to inject commands...

CVE-2021-34111

Thecus 4800Eco was discovered to contain a command injection vulnerability via the username parameter in /adm/setmain.php...

CVE-2021-34111

Thecus 4800Eco was discovered to contain a command injection vulnerability via the username parameter in /adm/setmain.php...

Command injection

Thecus 4800Eco was discovered to contain a command injection vulnerability via the username parameter in /adm/setmain.php...

CVE-2021-34111

Thecus 4800Eco was discovered to contain a command injection vulnerability via the username parameter in /adm/setmain.php...

CVE-2021-34111

The CVE-2021-34111 entry describes a command-injection vulnerability in Thecus 4800Eco, exploitable via the username parameter in /adm/setmain.php. CVSS v3.1 base score 9.8 (CRITICAL) with network access, no authentication, and no user interaction. The connected documents confirm the affected pro...

PT-2022-10322

Name of the Vulnerable Software and Affected Versions Thecus 4800Eco affected versions not specified Description A command injection issue was discovered via the username parameter in the "/adm/setmain.php" API endpoint. This allows for potential command execution. No information is provided abou...