Security Advisory

CVE-2021-29393

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-02-04 18:43:34
Last updated 2024-08-03 22:02:51
Assigner mitre
State PUBLISHED

Description

Remote Code Execution in cominput.jsp and comoutput.jsp in Northstar Technologies Inc NorthStar Club Management 6.3 allows remote unauthenticated users to inject and execute arbitrary system commands via the unsanitized user-controlled "command" and "commandvalues" parameters.