html/System-NeDi.php in the NeDi component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the scan functionality in the System / NeDi menu.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
gwos groundwork monitor 6.7.0 |