Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
IPFire < 2.19 Core Update 101 proxy.cgi RCE
Vulnerability Description
A remote command execution vulnerability exists in IPFire before version 2.19 Core Update 101 via the 'proxy.cgi' CGI interface. An authenticated attacker can inject arbitrary shell commands through crafted values in the NCSA user creation form fields, leading to command execution with web server privileges.
CVSS Information
N/A
Vulnerability Type
OS命令中使用的特殊元素转义处理不恰当(OS命令注入)
Vulnerability Title
IPFire 安全漏洞
Vulnerability Description
IPFire是IPFire组织的一种开源 Linux 发行版。主要用作路由器和防火墙。 IPFire存在安全漏洞，该漏洞源于proxy.cgi接口输入验证不当，可能导致远程命令执行。
CVSS Information
N/A
Vulnerability Type
N/A