CVE-2013-3322 – NetApp OnCommand System Manager 2.1 / 2.0.2 XSS / File Inclusion / Command Execution

https://notcve.org/view.php?id=CVE-2013-3322

NetApp OnCommand System Manager 2.1 and earlier allows remote attackers to inject arbitrary commands in the Halt/Reboot interface. NetApp OnCommand System Manager versión 2.1 y anteriores, permiten a atacantes remotos inyectar comandos arbitrarios en la interfaz Halt/Reboot. NetApp onCommand System Manager versions 2.1 and below and 2.0.2 and below suffer from cross site scripting, file inclusion, and OS command execution vulnerabilities. • https://exchange.xforce.ibmcloud.com/vulnerabilities/84063 https://www.securityfocus.com/archive/1/526552 • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •