Remote Code Execution in cominput.jsp and comoutput.jsp in Northstar Technologies Inc NorthStar Club Management 6.3 allows remote unauthenticated users to inject and execute arbitrary system commands via the unsanitized user-controlled "command" and "commandvalues" parameters.
References
Link | Resource |
---|---|
https://ardent-security.com | Third Party Advisory |
https://ardent-security.com/en/advisory/asa-2021-01/ | Third Party Advisory |
Configurations
History
No history.
Information
Published : 2022-02-04 19:15
Updated : 2024-02-28 18:48
NVD link : CVE-2021-29393
Mitre link : CVE-2021-29393
CVE.ORG link : CVE-2021-29393
JSON object : View
Products Affected
globalnorthstar
- northstar_club_management
CWE
CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')