Zeroshell - vulnerabilities (CVEs)

4 CVEs in 1 products, 0 in the last 30 days, newest from 2022-06-11.

Products

• Zeroshell - 3 CVEs

Newest CVEs of Zeroshell

• CVE-2021-41738 - CVSS 8.8 (high), 2022-06-11: ZeroShell 3.9.5 has a command injection vulnerability in /cgi-bin/kerbynet IP parameter, which may allow an authenticated attacker to execute system commands.
• CVE-2020-29390 - CVSS 9.8 (critical), 2020-11-30: Zeroshell 3.9.3 contains a command injection vulnerability in the /cgi-bin/kerbynet StartSessionSubmit parameter that could allow an unauthenticated attacker…
• CVE-2019-12725 - CVSS 9.8 (critical), 2019-07-19: Zeroshell 3.9.0 is prone to a remote command execution vulnerability. Specifically, this issue occurs because the web application mishandles a few HTTP…
• CVE-2009-0545 - CVSS 10 (critical), 2009-02-12: cgi-bin/kerbynet in ZeroShell 1.0beta11 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the type parameter in a…