Remote Code Execution in cominput.jsp and comoutput.jsp in Northstar Technologies Inc NorthStar Club Management 6.3 allows remote unauthenticated users to inject and execute arbitrary system commands via the unsanitized user-controlled "command" and "commandvalues" parameters.
References
Link | Resource |
---|---|
https://ardent-security.com | Third Party Advisory |
https://ardent-security.com/en/advisory/asa-2021-01/ | Third Party Advisory |
https://ardent-security.com | Third Party Advisory |
https://ardent-security.com/en/advisory/asa-2021-01/ | Third Party Advisory |
Configurations
History
21 Nov 2024, 06:01
Type | Values Removed | Values Added |
---|---|---|
References | () https://ardent-security.com - Third Party Advisory | |
References | () https://ardent-security.com/en/advisory/asa-2021-01/ - Third Party Advisory |
Information
Published : 2022-02-04 19:15
Updated : 2024-11-21 06:01
NVD link : CVE-2021-29393
Mitre link : CVE-2021-29393
CVE.ORG link : CVE-2021-29393
JSON object : View
Products Affected
globalnorthstar
- northstar_club_management
CWE
CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')