A command-injection vulnerability in the Image Upload function of the NASCENT RemKon Device Manager 4.0.0.0 allows malicious users to execute arbitrary commands, as root, via shell metacharacters in the filename parameter to assets/index.php.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
nascent remkon device manager 4.0.0.0 |