Beveiligingsadvies

CVE-2022-50794

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-12-30 22:41:38

Laatst bijgewerkt 2026-01-05 20:19:28

Toegewezen door VulnCheck

CVSS-score 9.8

Status PUBLISHED

Beschrijving

SOUND4 IMPACT/FIRST/PULSE/Eco versions 2.x and below contain an unauthenticated command injection vulnerability in the username parameter. Attackers can exploit index.php and login.php scripts by injecting arbitrary shell commands through the HTTP POST 'username' parameter to execute system commands.

← Alle CVE's bekijken Bekijk op cve.org ↗