8 matches found
EUVD-2019-9089
Malware in sbrugna...
CVE-2019-19469
In Zmanda Management Console 3.3.9, ZMCAdminAdvanced?form=adminTasks=Apply= allows CSRF, as demonstrated by command injection with shell metacharacters. This may depend on weak default credentials...
CVE-2019-19469
In Zmanda Management Console 3.3.9, ZMCAdminAdvanced?form=adminTasks&action=Apply&command= allows CSRF, as demonstrated by command injection with shell metacharacters. This may depend on weak default credentials...
Command injection
In Zmanda Management Console 3.3.9, ZMCAdminAdvanced?form=adminTasks&action=Apply&command= allows CSRF, as demonstrated by command injection with shell metacharacters. This may depend on weak default credentials...
PT-2019-15850
Name of the Vulnerable Software and Affected Versions Zmanda Management Console version 3.3.9 Description The issue allows for CSRF, as demonstrated by command injection with shell metacharacters, potentially due to weak default credentials. This can be exploited through the "ZMC Admin...
Zmanda Management Console Cross-Site Request Forgery Vulnerability
Zmanda Management Console ZMC is a management console program for connecting to, and managing, the Zmanda Cloud from Zmanda USA. A cross-site request forgery vulnerability in Zmanda ZMC version 3.3.9 can be exploited by an attacker to execute arbitrary code on a server using the Zmanda Management...
CVE-2019-19469: Improper Neutralization of Special Elements used in an OS Command
In Zmanda Management Console 3.3.9, ZMCAdminAdvanced?form=adminTasks&action=Apply&command= allows CSRF, as demonstrated by command injection with shell metacharacters. This may depend on weak default credentials...