SOUND4多款产品 操作系统命令注入漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://nvd.nist.gov/vuln/detail/CVE-2022-50789
• https://app.opencve.io/cve/?product=impact&vendor=sound4
• https://nvd.nist.gov/vuln/detail/CVE-2022-50795
• https://fortiguard.fortinet.com/encyclopedia/ips/59956
• https://www.vulncheck.com/advisories/sound-impactfirstpulseeco-x-unauthenticated-command-injection-via-username
• https://www.cvedetails.com/cve/CVE-2022-50791/
• https://www.cve.org/CVERecord?id=CVE-2022-50791
• https://github.com/advisories/GHSA-6xcq-8cpm-6v2h
• https://nvd.nist.gov/vuln/detail/CVE-2022-50794
• https://app.opencve.io/cve/?vendor=sound4
• https://www.vulncheck.com/advisories/sound-impactfirstpulseeco-x-conditional-command-injection-via-dnsphp
• https://www.exploit-db.com/exploits/51173

Related Vulnerabilities

• SOUND4多款产品 路径遍历漏洞
• SOUND4多款产品 访问控制错误漏洞
• SOUND4多款产品 SQL注入漏洞
• SOUND4多款产品 安全漏洞
• SOUND4多款产品 跨站脚本漏洞
• PoCsound4-directory-listing: SOUND4 Impact/Pulse/First/Eco <=2.x - Information Disclosure
• PoCsound4-file-disclosure: SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x (PHPTail) Unauthenticated File Disclosure
• PoCsound4-impact-auth-bypass: SOUND4 IMPACT/FIRST/PULSE/Eco <= 2.x - Authentication Bypass
• PoCsound4-password-auth-bypass: Sound4 IMPACT/FIRST/PULSE/Eco <=2.x - Authentication Bypass