Filtered by vendor Zeroshell Subscriptions
Filtered by product Zeroshell Subscriptions
Total 4 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2021-41738 1 Zeroshell 1 Zeroshell 2024-11-21 8.8 High
ZeroShell 3.9.5 has a command injection vulnerability in /cgi-bin/kerbynet IP parameter, which may allow an authenticated attacker to execute system commands.
CVE-2020-29390 1 Zeroshell 1 Zeroshell 2024-11-21 9.8 Critical
Zeroshell 3.9.3 contains a command injection vulnerability in the /cgi-bin/kerbynet StartSessionSubmit parameter that could allow an unauthenticated attacker to execute a system command by using shell metacharacters and the %0a character.
CVE-2019-12725 1 Zeroshell 1 Zeroshell 2024-11-21 N/A
Zeroshell 3.9.0 is prone to a remote command execution vulnerability. Specifically, this issue occurs because the web application mishandles a few HTTP parameters. An unauthenticated attacker can exploit this issue by injecting OS commands inside the vulnerable parameters.
CVE-2009-0545 1 Zeroshell 1 Zeroshell 2024-11-21 N/A
cgi-bin/kerbynet in ZeroShell 1.0beta11 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the type parameter in a NoAuthREQ x509List action.