CVE-2018-5347

Seagate Media Server in Seagate Personal Cloud has unauthenticated command injection in the uploadTelemetry and getLogs functions in views.py because .psp URLs are handled by the fastcgi.server component and shell metacharacters are mishandled.

• CWE-78

• https://blogs.securiteam.com/index.php/archives/3548Exploit, Third Party Advisory
• https://www.exploit-db.com/exploits/43659/Exploit, Third Party Advisory, VDB Entry
• https://blogs.securiteam.com/index.php/archives/3548Exploit, Third Party Advisory
• https://www.exploit-db.com/exploits/43659/Exploit, Third Party Advisory, VDB Entry

Published

Jan 12, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-5339An issue was discovered in Zoho ManageEngine Desktop Central…
• CVE-2018-5340An issue was discovered in Zoho ManageEngine Desktop Central…
• CVE-2018-5341An issue was discovered in Zoho ManageEngine Desktop Central…
• CVE-2018-5342An issue was discovered in Zoho ManageEngine Desktop Central…
• CVE-2018-5344In the Linux kernel through 4.14.13, drivers/block/loop.c mi…
• CVE-2018-5345A stack-based buffer overflow within GNOME gcab through 0.7.…
• CVE-2018-5349A vulnerability has been found in Heimdal PRO v2.2.190, but …
• CVE-2018-5353The custom GINA/CP module in Zoho ManageEngine ADSelfService…9.8
• CVE-2018-5354The custom GINA/CP module in ANIXIS Password Reset Client be…8.8
• CVE-2018-5357ImageMagick 7.0.7-22 Q16 has memory leaks in the ReadDCMImag…
• CVE-2018-5358ImageMagick 7.0.7-22 Q16 has memory leaks in the EncodeImage…
• CVE-2018-5359The server in Flexense SysGauge 3.6.18 operating on port 922…