Vulnerabilities (CVE)

Filtered by vendor Globalnorthstar Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-29396 1 Globalnorthstar 1 Northstar Club Management 2022-07-12 7.5 HIGH 9.8 CRITICAL
Systemic Insecure Permissions in Northstar Technologies Inc NorthStar Club Management 6.3 allows remote unauthenticated users to use various functionalities without authentication.
CVE-2021-29393 1 Globalnorthstar 1 Northstar Club Management 2022-02-09 10.0 HIGH 9.8 CRITICAL
Remote Code Execution in cominput.jsp and comoutput.jsp in Northstar Technologies Inc NorthStar Club Management 6.3 allows remote unauthenticated users to inject and execute arbitrary system commands via the unsanitized user-controlled "command" and "commandvalues" parameters.