CVE-2016-1524
13.02.2016, 02:59
Multiple unrestricted file upload vulnerabilities in NETGEAR Management System NMS300 1.5.0.11 and earlier allow remote attackers to execute arbitrary Java code by using (1) fileUpload.do or (2) lib-1.0/external/flash/fileUpload.do to upload a JSP file, and then accessing it via a direct request for a /null URI.Enginsight
Vendor | Product | Version |
---|---|---|
netgear | prosafe_network_management_software_300 | 𝑥 ≤ 1.5.0.11 |
𝑥
= Vulnerable software versions
References