PT-2026-24766 · Netgain Systems · Netgain Em Plus

Azams · Published 2026-03-11 · Updated 2026-03-11 · CVE-2019-25468

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NetGain EM Plus version 10.1.68

Description The software contains a remote code execution issue that allows attackers to execute arbitrary system commands. Unauthenticated attackers can exploit this by sending malicious parameters to the ''script test.jsp'' endpoint. Specifically, attackers can send POST requests with shell commands embedded within the content parameter. This allows them to execute code and retrieve the command output.

Recommendations Apply updates to address the issue in NetGain EM Plus version 10.1.68.

Exploit

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2019-25468

Affected Products

Netgain Em Plus

References · 5

• 🔥 https://exploit-db.com/exploits/47391 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-25468 · Security Note
• https://vulncheck.com/advisories/netgain-em-plus-remote-code-execution-via-script-test-jsp · Note
• http://netgain-systems.com · Note
• https://vulncheck.com/advisories/netgain-em-plus-remote-code-execution-via-script-testjsp · Note