Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2023-37292

HGiga iSherlock - Command Injection

Description

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in HGiga iSherlock 4.5 (iSherlock-user modules), HGiga iSherlock 5.5 (iSherlock-user modules) allows OS Command Injection.This issue affects iSherlock 4.5: before iSherlock-user-4.5-174; iSherlock 5.5: before iSherlock-user-5.5-174.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HGiga iSherlock 4.5

Default version status: unaffected

  • to < iSherlock-user-4.5-174affected

HGiga iSherlock 5.5

Default version status: unaffected

  • to < iSherlock-user-5.5-174affected

References