CVE-2014-0359

High

Published: 15/04/2014(UTC)Translated: 17/06/2026(UTC)NVD NIST

Summary

Xangati XSR before version 11 and XNR before version 7 allows remote attackers to execute arbitrary commands via shell metacharacters in the gui_input_test.pl params parameter to servlet/Installer.

Risk Assessment

Attackers can remotely take control of the system, leading to serious security breaches and potential data loss.

Recommendation

It is recommended to upgrade Xangati XSR to version 11 or later and XNR to version 7 or later to mitigate this vulnerability.

Other vulnerabilities in Xangati XSR, XNR

CVE-2014-0358High
Multiple directory traversal vulnerabilities in Xangati XSR before version 11 and XNR before version 7 allow remote attackers to read arbitrary files by exploiting .. (dot dot) sequences in various action parameters.

Original NVD description (English source)

Xangati XSR before 11 and XNR before 7 allows remote attackers to execute arbitrary commands via shell metacharacters in a gui_input_test.pl params parameter to servlet/Installer.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS