Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-289g-75hj-mg9m

Опубликовано: 10 фев. 2022
Источник: github
Github: Не прошло ревью

Описание

Remote Code Execution in cominput.jsp and comoutput.jsp in Northstar Technologies Inc NorthStar Club Management 6.3 allows remote unauthenticated users to inject and execute arbitrary system commands via the unsanitized user-controlled "command" and "commandvalues" parameters.

Remote Code Execution in cominput.jsp and comoutput.jsp in Northstar Technologies Inc NorthStar Club Management 6.3 allows remote unauthenticated users to inject and execute arbitrary system commands via the unsanitized user-controlled "command" and "commandvalues" parameters.

EPSS

Процентиль: 94%
0.14164
Средний

Дефекты

CWE-78

Связанные уязвимости

CVSS3: 9.8
nvd
почти 4 года назад

Remote Code Execution in cominput.jsp and comoutput.jsp in Northstar Technologies Inc NorthStar Club Management 6.3 allows remote unauthenticated users to inject and execute arbitrary system commands via the unsanitized user-controlled "command" and "commandvalues" parameters.

EPSS

Процентиль: 94%
0.14164
Средний

Дефекты

CWE-78