إرسال #505009: esafenet DSM v3.1.2 Command Injectionالمعلومات

عنوانesafenet DSM v3.1.2 Command Injection
الوصفA command injection vulnerability To RCE exists in the examExportPDF method of the AdminPlanController class. This vulnerability allows an attacker to execute arbitrary commands on the server by manipulating the s parameter in the request.
المصدر⚠️ https://github.com/666lail/report/blob/main/tmp/2.md
المستخدم
 207556249 (UID 81808)
ارسال21/02/2025 12:33 PM (2 سنوات منذ)
الاعتدال02/03/2025 04:39 PM (9 days later)
الحالةتمت الموافقة
إدخال VulDB298111 [ESAFENET DSM 3.1.2 examExportPDF s تجاوز الصلاحيات]
النقاط16

Interested in the pricing of exploits?

See the underground prices here!