CVE-2018-11510 | BDVDB-2026-103142 Detail

Description#

The ASUSTOR ADM 3.1.0.RFQ3 NAS portal suffers from an unauthenticated remote code execution vulnerability in the portal/apis/aggrecate_js.cgi file by embedding OS commands in the 'script' parameter.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.exploit-db.com/exploits/45200/
http://packetstormsecurity.com/files/148919/ASUSTOR-NAS-ADM-3.1.0-Remote-Command-Execution-SQL-Injection.html
https://www.exploit-db.com/exploits/45212/
https://github.com/mefulton/CVE-2018-11510
https://github.com/mefulton/CVE-2018-11510/blob/master/admex.py

Exploit#

https://www.exploit-db.com/exploits/45200/
https://www.exploit-db.com/exploits/45212/

History#

Version 12018-06-28Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.