[0day-rubbish] DBxtra .NET 13.1.1.0 Unauthenticated SOAP API to xp_cmdshell code execution (9.8)

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-09-08 17:31 UTC
  • Importiert: 2026-09-08 18:19 UTC
  • Quelle-ID: full_disc
  • uid_hash: 2523815e7a382e8c7347c296c6489d7a0beb1f94afb27b0af0f8b500b691360b

Inhalt

Posted by disclosure via Fulldisclosure on Sep 08 TO: fulldisclosure () seclists org

SUBJECT: [0day-rubbish] DBxtra .NET 13.1.1.0 Unauthenticated SOAP API to xp_cmdshell code execution (9.8)

FROM: disclosure () 0day-rubbish com

----BODY----

0day Rubbish Research Team is publicly disclosing a vulnerability in

DBxtra .NET 13.1.1.0.

Type: Unauthenticated SOAP API to xp_cmdshell code execution (CWE-306)

CVSS: 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)

Impact: unauthenticated remote code execution as...

No data

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
Full Disclosure

full_disc

threat_intel - de https://seclists.org/rss/fulldisclosure.rss