Submit #768861: qinglong v2.20.1 Remote Command Executioninfo

Titelqinglong v2.20.1 Remote Command Execution
Beschreibungwhyour/qinglong has a Remote Command Execution Vulnerability. This vulnerability is a remote command execution vulnerability caused by the system's failure to strictly filter the api interface and the user's incoming parameters. Attackers can obtain server permissions by executing arbitrary commands through vulnerabilities, which may lead to further attacks on the intranet.
Quelle⚠️ https://github.com/A7cc/cve/issues/6
Benutzer
 a7cc (UID 81317)
Einreichung27.02.2026 06:53 (vor 1 Monat)
Moderieren11.03.2026 14:14 (12 days later)
StatusAkzeptiert
VulDB Eintrag350394 [whyour qinglong bis 2.20.1 API Interface back/loaders/express.ts command erweiterte Rechte]
Punkte19

Do you want to use VulDB in your project?

Use the official API to access entries easily!