Threats tagged 'ghsa-x64r-r4gj-xh6q'

Sunhillo SureLine versions before 9.1.5 have an OS command injection vulnerability in the networkDiag.cgi endpoint. Authenticated remote attackers with any web account can exploit this flaw by injecting shell metacharacters into the ipAddr or dnsAddr parameters. The vulnerability allows bypassing a prior fix's incomplete character denylist using URL-encoded newline or ampersand sequences, enabling execution of arbitrary commands as root. This leads to full system compromise.