PT-2026-24766 · Netgain Systems · Netgain Em Plus

Azams · Publicado 2026-03-11 · Atualizado 2026-03-11 · CVE-2019-25468

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NetGain EM Plus version 10.1.68

Description The software contains a remote code execution issue that allows attackers to execute arbitrary system commands. Unauthenticated attackers can exploit this by sending malicious parameters to the ''script test.jsp'' endpoint. Specifically, attackers can send POST requests with shell commands embedded within the content parameter. This allows them to execute code and retrieve the command output.

Recommendations Apply updates to address the issue in NetGain EM Plus version 10.1.68.

Exploit

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2019-25468

Produtos afetados

Netgain Em Plus

Referências · 5

• 🔥 https://exploit-db.com/exploits/47391 · Exploit
• https://vulncheck.com/advisories/netgain-em-plus-remote-code-execution-via-script-test-jsp · Nota
• http://netgain-systems.com · Nota
• https://vulncheck.com/advisories/netgain-em-plus-remote-code-execution-via-script-testjsp · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-25468 · Nota de Segurança