CVE-2024-44623

An issue in TuomoKu SPx-GC v.1.3.0 and before allows a remote attacker to execute arbitrary code via the childprocess.js function...

CVE-2024-44623

An issue in TuomoKu SPx-GC v.1.3.0 and before allows a remote attacker to execute arbitrary code via the childprocess.js function...

CVE-2024-44623

An issue in TuomoKu SPx-GC v.1.3.0 and before allows a remote attacker to execute arbitrary code via the childprocess.js function...

CVE-2024-44623

An issue in TuomoKu SPx-GC v.1.3.0 and before allows a remote attacker to execute arbitrary code via the childprocess.js function...

CVE-2024-44623: Improper Control of Generation of Code

An issue in TuomoKu SPx-GC v.1.3.0 and before allows a remote attacker to execute arbitrary code via the childprocess.js function...

CVE-2024-44623

An issue in TuomoKu SPx-GC v.1.3.0 and before allows a remote attacker to execute arbitrary code via the childprocess.js function...

CVE-2024-44623

The CVE-2024-44623 entry has concrete technical details in connected data: SPX-GC (TuomoKu) versions <= 1.3.0 are affected. The root cause is the use of unsanitized user input passed to the Node.js child_process.exec function in routes/routes-api.js, enabling unauthenticated remote code execut...

PT-2024-31199

Name of the Vulnerable Software and Affected Versions TuomoKu SPx-GC versions 1.3.0 and before Description An issue in TuomoKu SPx-GC allows a remote attacker to execute arbitrary code via the child process.js function. Recommendations For versions 1.3.0 and before, as a temporary workaround,...