CVE-2021-29393

Name of the Vulnerable Software and Affected Versions NorthStar Club Management version 6.3

Description The issue allows remote unauthenticated users to inject and execute arbitrary system commands via the unsanitized user-controlled command and commandvalues parameters in cominput.jsp and comoutput.jsp.

Recommendations For NorthStar Club Management version 6.3, consider sanitizing the command and commandvalues parameters in cominput.jsp and comoutput.jsp to prevent remote code execution. As a temporary workaround, restrict access to these pages to minimize the risk of exploitation.