Vulnerabilities

TI-2021-18395 CVE-2021-41738 · GHSA-qp5f-6g86-h75x

ZeroShell 3.9.5 has a command injection vulnerability in /cgi-bin/kerbynet IP parameter…

MEDIUM 42

ZeroShell 3.9.5 has a command injection vulnerability in /cgi-bin/kerbynet IP parameter, which may allow an authenticated attacker to execute system commands.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0181 Published 2022-06-11 No fix listed CWE-78

TI-2020-17668 CVE-2020-29390 · GHSA-wfh6-xhqh-h5xw

Zeroshell 3.9.3 contains a command injection vulnerability in the /cgi-bin/kerbynet…

HIGH 69

Zeroshell 3.9.3 contains a command injection vulnerability in the /cgi-bin/kerbynet StartSessionSubmit parameter that could allow an unauthenticated attacker to execute a system command by using shell metacharacters and…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.39565 Published 2020-11-30 No fix listed CWE-78

TI-2019-09518 CVE-2019-12725 · GHSA-83mm-jfvg-jxxh

Zeroshell 3.9.0 is prone to a remote command execution vulnerability.

CRITICAL 85

Zeroshell 3.9.0 is prone to a remote command execution vulnerability.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.89955 Published 2019-07-19 No fix listed CWE-78

TI-2009-00524 CVE-2009-0545 · GHSA-9p53-hww6-pm2p

cgi-bin/kerbynet in ZeroShell 1.0beta11 and earlier allows remote attackers to execute…

CRITICAL 86

cgi-bin/kerbynet in ZeroShell 1.0beta11 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the type parameter in a NoAuthREQ x509List action.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.90386 Published 2009-02-12 No fix listed CWE-20

Vulnerabilities

Filters

ZeroShell 3.9.5 has a command injection vulnerability in /cgi-bin/kerbynet IP parameter…

Zeroshell 3.9.3 contains a command injection vulnerability in the /cgi-bin/kerbynet…

Zeroshell 3.9.0 is prone to a remote command execution vulnerability.

cgi-bin/kerbynet in ZeroShell 1.0beta11 and earlier allows remote attackers to execute…