Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A command injection vulnerability exists in the ARP ping device tool feature of the ScienceLogic SL1 that takes unsanitized user controlled input and passes it directly to a shell command. This allows for the injection of arbitrary commands to the underlying operating system.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
OS命令中使用的特殊元素转义处理不恰当(OS命令注入)
Vulnerability Title
ScienceLogic SL1 操作系统命令注入漏洞
Vulnerability Description
ScienceLogic SL1是ScienceLogic公司的一个应用程序。将您的房地产连接在一起，实现多向数据流和工作流程的自动化。 ScienceLogic SL1 11.1.2及之前版本存在安全漏洞，该漏洞源于存在命令注入漏洞，通过该漏洞可以获取未经净化的用户控制输入并将其直接传递给shell命令，然后向底层操作系统注入任意命令。
CVSS Information
N/A
Vulnerability Type
N/A