CVE-2023-0646

A vulnerability classified as critical was found in dst-admin 1.5.0. Affected by this vulnerability is an unknown functionality of the file /home/cavesConsole. The manipulation of the argument command leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-220033 was assigned to this vulnerability.

• CWE-77

• https://github.com/Ha0Liu/cveAdd/tree/developer/dst-admin%201.5.0%E5%90%8E%E5%8F%B0cavesConsole%E6%8E%A5%E5%8F%A3%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8CExploit, Third Party Advisory
• https://vuldb.com/?ctiid.220033Third Party Advisory
• https://vuldb.com/?id.220033Third Party Advisory
• https://github.com/Ha0Liu/cveAdd/tree/developer/dst-admin%201.5.0%E5%90%8E%E5%8F%B0cavesConsole%E6%8E%A5%E5%8F%A3%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8CExploit, Third Party Advisory
• https://vuldb.com/?ctiid.220033Third Party Advisory
• https://vuldb.com/?id.220033Third Party Advisory

Published

Feb 2, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-0640A vulnerability was found in TRENDnet TEW-652BRP 3.04b01. It…9.8
• CVE-2023-0641A vulnerability was found in PHPGurukul Employee Leaves Mana…9.1
• CVE-2023-0642Cross-Site Request Forgery (CSRF) in GitHub repository squid…6.5
• CVE-2023-0643Improper Handling of Additional Special Element in GitHub re…6.1
• CVE-2023-0644The Push Notifications for WordPress by PushAssist WordPress…6.1
• CVE-2023-0645An out of bounds read exists in libjxl. An attacker using a …9.1
• CVE-2023-0647A vulnerability, which was classified as critical, has been …7.5
• CVE-2023-0648A vulnerability, which was classified as critical, was found…7.5
• CVE-2023-0649A vulnerability has been found in dst-admin 1.5.0 and classi…7.5
• CVE-2023-0650A vulnerability was found in YAFNET up to 3.1.11 and classif…5.4
• CVE-2023-0651A vulnerability was found in FastCMS 0.1.0. It has been clas…9.8
• CVE-2023-0652Due to a hardlink created in the ProgramData folder during t…7.8