Threats tagged 'ghsa-fvgc-3wm9-ph8c'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	7.3	CVE-2024-28138An unauthenticated attacker with network access to the affected device's web interface can execute any system command High7.32024-12-10GCVE DatabaseCVE-2024-28138 CVE-2024-28138 is a high-severity vulnerability allowing unauthenticated attackers with network access to execute arbitrary system commands on the affected device via the web interface. The issue arises from improper sanitization of the HTTP GET parameter "data" in the "msg_events.php" script, enabling command injection as the www-data user. Report on CVE-2024-28138 Vulnerability CWE-78 #ghsa-fvgc-3wm9-ph8c	GCVE Database	2024-12-10

Page 1 of 1