NetSight
high8.0

CVE-2018-16951

xunfeng 0.2.0 allows command execution via CSRF because masscan.py mishandles backquote characters, a related issue to CVE-2018-16832.

Impact

xunfeng 0.2.0 allows command execution via CSRF because masscan.py mishandles backquote characters, a related issue to CVE-2018-16832.

Affected products

VendorProductAffected versions
Xunfeng ProjectXunfeng
Version 0.2.0

Weakness classification

References