Lucene search
Veracode Vulnerability DatabaseVERACODE:34548HistoryMar 07, 2022 - 7:17 a.m.
OS Command Injection
2022-03-0707:17:18
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
16
0.949 High
EPSS
Percentile
99.3%
genieacs is vulnerable to OS command injection. An attacker is able to inject malicious OS command via the ping host argument of lib/ui/api.ts and lib/ping.ts because it does not escape the argument and does not properly perform authorization check.
Related
githubexploit
githubexploit
Exploit for OS Command Injection in Genieacs
2023-06-21 12:29:43
Exploit for OS Command Injection in Genieacs
2023-06-21 13:00:53
cve
cve
CVE-2021-46704
2022-03-06 07:15:07
osv
osv
OS Command Injection in GenieACS
2022-03-07 00:00:40
CVE-2021-46704
2022-03-06 07:15:07
prion
prion
Command injection
2022-03-06 07:15:00
nuclei
nuclei
GenieACS => 1.2.8 - OS Command Injection
2023-06-21 20:03:09
github
github
OS Command Injection in GenieACS
2022-03-07 00:00:40
nvd
nvd
CVE-2021-46704
2022-03-06 07:15:07
cvelist
cvelist
CVE-2021-46704
2022-03-06 06:23:47