Skip to content
OpenAdvisories

Vendor

Openfiler

2 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Critical 9.4
    CVE-2012-10040 Public exploit

    Openfiler v2.x NetworkCard Command Execution

    Openfiler v2.x contains a command injection vulnerability in the system.html page. The device parameter is used to instantiate a NetworkCard object, whose constructor in network.inc calls exec() with unsanitized input. An authenticated attacker can exploit th…