Логотип exploitDog
bind:CVE-2024-4299
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2024-4299

Количество 2

Количество 2

nvd логотип

CVE-2024-4299

почти 2 года назад

The system configuration interface of HGiga iSherlock (including MailSherlock, SpamSherock, AuditSherlock) fails to filter special characters in certain function parameters, allowing remote attackers with administrative privileges to exploit this vulnerability for Command Injection attacks, enabling execution of arbitrary system commands.

CVSS3: 7.2
EPSS: Низкий
github логотип

GHSA-wgx8-xhfh-5ph4

почти 2 года назад

The system configuration interface of HGiga iSherlock (including MailSherlock, SpamSherock, AuditSherlock) fails to filter special characters in certain function parameters, allowing remote attackers with administrative privileges to exploit this vulnerability for Command Injection attacks, enabling execution of arbitrary system commands.

CVSS3: 7.2
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2024-4299

The system configuration interface of HGiga iSherlock (including MailSherlock, SpamSherock, AuditSherlock) fails to filter special characters in certain function parameters, allowing remote attackers with administrative privileges to exploit this vulnerability for Command Injection attacks, enabling execution of arbitrary system commands.

CVSS3: 7.2
2%
Низкий
почти 2 года назад
github логотип
GHSA-wgx8-xhfh-5ph4

The system configuration interface of HGiga iSherlock (including MailSherlock, SpamSherock, AuditSherlock) fails to filter special characters in certain function parameters, allowing remote attackers with administrative privileges to exploit this vulnerability for Command Injection attacks, enabling execution of arbitrary system commands.

CVSS3: 7.2
2%
Низкий
почти 2 года назад

Уязвимостей на страницу