PT-2022-9919
CVE-2021-29393
·
تاريخ النشر
2022-02-04
·
تاريخ التحديث
2022-02-09
الوصف من
CVSS 2.0
10
حرجةالمقاييسAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
NorthStar Club Management version 6.3
Description
The issue allows remote unauthenticated users to inject and execute arbitrary system commands via the unsanitized user-controlled
command and commandvalues parameters in cominput.jsp and comoutput.jsp.Recommendations
For NorthStar Club Management version 6.3, consider sanitizing the
command and commandvalues parameters in cominput.jsp and comoutput.jsp to prevent remote code execution. As a temporary workaround, restrict access to these pages to minimize the risk of exploitation. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾