CVE-2019-25468

CRITICAL

NetGain EM Plus 10.1.68 - RCE

Title source: llm

Description

NetGain EM Plus 10.1.68 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary system commands by submitting malicious parameters to the script_test.jsp endpoint. Attackers can send POST requests with shell commands embedded in the 'content' parameter to execute code and retrieve command output.

Exploits (1)

exploitdb WORKING POC

by azams · gowebappsjsp

https://www.exploit-db.com/exploits/47391

View Code ZIP pw:eip

References (3)

[Various Sources] http://netgain-systems.com

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/47391

[Third Party Advisory] https://www.vulncheck.com/advisories/netgain-em-plus-remote-code-execution-via-script-test-jsp

Scores

CVSS v3 9.8

EPSS 0.0031

EPSS Percentile 54.4%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-94

Status published

Products (1)

NetGain Systems/NetGain EM Plus 10.1.68

Published Mar 11, 2026

Tracked Since Mar 12, 2026