Cayin Content Management Server 11.0 Root Remote Command Injection
Posted by deepcore on June 5, 2020 – 5:23 pm
CAYIN CMS suffers from an authenticated OS semi-blind command injection vulnerability using default credentials. This can be exploited to inject and execute arbitrary shell commands as the root user through the NTP_Server_IP HTTP POST parameter in system.cgi page.
Post a reply
You must be logged in to post a comment.