CVE-2022-4257 – C-DATA Web Management System GET Parameter jumpto.php argument injection

https://notcve.org/view.php?id=CVE-2022-4257

A vulnerability was found in C-DATA Web Management System. It has been rated as critical. This issue affects some unknown processing of the file cgi-bin/jumpto.php of the component GET Parameter Handler. The manipulation of the argument hostname leads to argument injection. The attack may be initiated remotely. • https://github.com/siriuswhiter/VulnHub/blob/main/C-Data/rce1.md https://vuldb.com/?id.214631 • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CWE-707: Improper Neutralization •