CVE-2023-2682

A vulnerability was found in Caton Live up to 2023-04-26 and classified as critical. This issue affects some unknown processing of the file /cgi-bin/ping.cgi of the component Mini_HTTPD. The manipulation of the argument address with the input ;id;uname${IFS}-a leads to command injection. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-228911. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-77
• CWE-77

• https://vuldb.com/?ctiid.228911Permissions Required, Third Party Advisory
• https://vuldb.com/?id.228911Permissions Required, Third Party Advisory
• https://vuldb.com/?ctiid.228911Permissions Required, Third Party Advisory
• https://vuldb.com/?id.228911Permissions Required, Third Party Advisory

Published

May 12, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-2681An SQL Injection vulnerability has been found on Jorani vers…8.8
• CVE-2023-26812Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE…
• CVE-2023-26813SQL injection vulnerability in com.xnx3.wangmarket.plugin.da…9.8
• CVE-2023-26817codefever before 2023.2.7-commit-b1c2e7f was discovered to c…8.8
• CVE-2023-26818Telegram 9.3.1 and 9.4.0 allows attackers to access restrict…5.5
• CVE-2023-26819cJSON 1.7.15 might allow a denial of service via a crafted J…2.9
• CVE-2023-26820siteproxy v1.0 was discovered to contain a path traversal vu…7.5
• CVE-2023-26822D-Link Go-RT-AC750 revA_v101b03 was discovered to contain a …9.8
• CVE-2023-26823Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE…
• CVE-2023-26829An authentication bypass vulnerability in the Password Reset…9.8
• CVE-2023-2683A memory leak in the EFR32 Bluetooth LE stack 5.1.0 through …6.5
• CVE-2023-26830An unrestricted file upload vulnerability in the administrat…7.2