CVE-2020-24572-POC

CVE-2020-24572-POC An issue was discovered in includes/webconsole.php in RaspAP 2.5. With authenticated access, an attacker can use a misconfigured and virtually unrestricted web console to attack the underlying OS running this software, and execute commands on the system including ones for...

kodbox 操作系统命令注入漏洞

kodbox is a web file manager. An operating system command injection vulnerability exists in kodbox version 1.26, which stems from the file webconsole.php that can lead to operating system command injection...

CVE-2020-24572

An issue was discovered in includes/webconsole.php in RaspAP 2.5. With authenticated access, an attacker can use a misconfigured and virtually unrestricted web console to attack the underlying OS Raspberry Pi running this software, and execute commands on the system including ones for uploading o...

CVE-2020-24572

CVE-2020-24572 affects RaspAP 2.5 and stems from an issue in includes/webconsole.php. With authenticated access, a misconfigured (and virtually unrestricted) web console can be used to attack the underlying OS (Raspberry Pi) running RaspAP, allowing execution of system commands, including uploadi...

PT-2020-15746

Name of the Vulnerable Software and Affected Versions RaspAP version 2.5 Description An issue in the includes/webconsole.php file allows an attacker with authenticated access to exploit a misconfigured web console. This can lead to attacks on the underlying OS, which is typically a Raspberry Pi...

CVE-2020-24572: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered in includes/webconsole.php in RaspAP 2.5. With authenticated access, an attacker can use a misconfigured and virtually unrestricted web console to attack the underlying OS Raspberry Pi running this software, and execute commands on the system including ones for uploading o...

PT-2019-19404

Name of the Vulnerable Software and Affected Versions Sangfor Sundray WLAN Controller versions 3.7.4.2 and earlier Description The issue allows remote attackers to achieve full access to the system. This is due to the fact that shell metacharacters in the nginx webconsole.php Cookie header can be...