CVE-2021-26704

March 4, 2021

EPrints 3.4.2 allows remote attackers to execute arbitrary commands via crafted input to the verb parameter in a cgi/toolbox/toolbox URI.

Summary:

EPrints 3.4.2 allows remote attackers to execute arbitrary commands via crafted input to the verb parameter in a cgi/toolbox/toolbox URI.

Reference Links(if available):

  • https://github.com/grymer/CVE/blob/master/eprints_security_review.pdf
  • https://files.eprints.org/2549/
  • https://files.eprints.org/2548/

  • CVSS Score (if available)

    v2: / MEDIUM

    v3: /

    Links to Exploits(if available)

  • You may have missed

    image

    [LYNX] – Ransomware Victim: Grupo_Trisan

    November 16, 2024
    brute ratel c4

    Brute Ratel C4 Detected – 52[.]193[.]97[.]60:80

    November 16, 2024
    CISA Logo

    CISA: CISA Releases One Industrial Control Systems Advisory

    November 16, 2024
    CISA Logo

    CISA: CISA Adds One Known Exploited Vulnerability to Catalog

    November 16, 2024
    CISA Logo

    CISA: Oracle Releases Quarterly Critical Patch Update Advisory for October 2024

    November 16, 2024