Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Authenticated Command Injection to RCE
Vulnerability Description
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in ping tool of Profelis IT Consultancy SambaBox allows AUTHENTICATED user to cause run arbitrary code. This issue affects: Profelis IT Consultancy SambaBox 4.0 version 4.0 and prior versions on x86.
CVSS Information
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L
Vulnerability Type
在命令中使用的特殊元素转义处理不恰当(命令注入)
Vulnerability Title
Profelis IT Consultancy SambaBox 命令注入漏洞
Vulnerability Description
Profelis IT Consultancy SambaBox是Profelis IT Consultancy公司的一个企业目录解决方案。 Profelis IT Consultancy SambaBox x86 4.0及之前版本存在安全漏洞，该漏洞源于 ping 工具中的命令（“命令注入”）漏洞中使用的特殊元素的中和不当允许 AUTHENTICATED 用户导致运行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A