CVE-2021-29393

—

CVSS 3.1

9.8 critical

EPSS

4%p89

Published

Feb 4, 2022 (Feb 4, 2022)

Modified

Jun 17, 2026

Description

Remote Code Execution in cominput.jsp and comoutput.jsp in Northstar Technologies Inc NorthStar Club Management 6.3 allows remote unauthenticated users to inject and execute arbitrary system commands via the unsanitized user-controlled "command" and "commandvalues" parameters.

Vendors: globalnorthstar
Products: northstar club management
Weakness: CWE-78
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (3.6%)

In the news0 stories

No ingested article mentions this CVE yet.