Skip to content
OpenAdvisories

Vendor

Ångström Distribution Project

1 known vulnerabilities.

Products

Narcissus 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2012-10033 Public exploit

    Narcissus backend.php Image Configuration Command Injection

    Narcissus is vulnerable to remote code execution via improper input handling in its image configuration workflow. Specifically, the backend.php script fails to sanitize the release parameter before passing it to the configure_image() function. This function i…

    Ångström Distribution Project Narcissus