| Titre | Adslr B-QE2W401 250814-r037c Remote code execution |
|---|
| Description | This vulnerability originates from send_order.cgi, where the CGI-ELF retrieves parameters from requests and concatenates them into commands using the sprintf function without any filtering, allowing remote attackers to execute arbitrary commands without authorization through command separators. |
|---|
| La source | ⚠️ https://www.notion.so/2a60c75766a88027a6aec07b378332a8 |
|---|
| Utilisateur | 2er00ne (UID 91682) |
|---|
| Soumission | 09/11/2025 15:51 (il y a 9 mois) |
|---|
| Modérer | 30/11/2025 14:58 (21 days later) |
|---|
| Statut | Accepté |
|---|
| Entrée VulDB | 333808 [ADSLR B-QE2W401 250814-r037c /send_order.cgi parameterdel_swifimac élévation de privilèges] |
|---|
| Points | 15 |
|---|