Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
BrainyCP 1.0 Remote Code Execution via Authenticated Crontab Manipulation
Vulnerability Description
BrainyCP 1.0 contains an authenticated remote code execution vulnerability that allows logged-in users to inject arbitrary commands through the crontab configuration interface. Attackers can exploit the crontab endpoint by adding a malicious command that spawns a reverse shell to a specified IP and port.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
OS命令中使用的特殊元素转义处理不恰当(OS命令注入)
Vulnerability Title
Brainy BrainyCP 操作系统命令注入漏洞
Vulnerability Description
Brainy BrainyCP是Brainy公司的一个网站托管控制面板。 Brainy BrainyCP 1.0版本存在操作系统命令注入漏洞，该漏洞源于crontab配置接口存在远程代码执行漏洞，可能导致执行任意命令。
CVSS Information
N/A
Vulnerability Type
N/A