CVE-2019-25468
NetGain EM Plus 10.1.68 Remote Code Execution via script_test.jsp
NetGain EM Plus 10.1.68 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary system commands by submitting malicious parameters to the script_test.jsp endpoint. Attackers can send POST requests with shell commands embedded in the 'content' parameter to execute code and retrieve command output.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Produtos afetados
NetGain Systems · NetGain EM PlusQuer saber se a sua infraestrutura está exposta a isto?
Falar com a TrueHacking →