Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Static code injection vulnerability in user/settings/ in DeStar 0.2.2-5 allows remote authenticated users to add arbitrary administrators and inject arbitrary Python code into destar_cfg.py via a crafted pin parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Holger_Schurig Destar Add User静态代码注入漏洞
Vulnerability Description
Destar是一个基于Web界面来管理Asterisk开源程控交换软件(PBX)程序。能提供对Asterisk的高级别的提取配置管理。 DeStar 0.2.2-5版本的user/settings/中存在静态代码注入漏洞。远程验证用户可以借助一个特制的pin参数，添加任一管理员并向destar_cfg.py注入任意Python代码。
CVSS Information
N/A
Vulnerability Type
N/A