CVE-2021-29393

9.8 criticalEPSS 3.6%

Critical (9.8) in globalnorthstar northstar club management. EPSS 3.6% chance of exploitation in the next 30 days.

Remote Code Execution in cominput.jsp and comoutput.jsp in Northstar Technologies Inc NorthStar Club Management 6.3 allows remote unauthenticated users to inject and execute arbitrary system commands via the unsanitized user-controlled "command" and "commandvalues" parameters.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 3.6% chance of exploitation in the next 30 days; higher than 89% of CVEs (scores of 2026-10-31)
CWE: CWE-78
Published: 2022-02-04
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

globalnorthstar:northstar_club_management

References

https://ardent-security.com
https://ardent-security.com/en/advisory/asa-2021-01/
https://ardent-security.com
https://ardent-security.com/en/advisory/asa-2021-01/

Check your stack JSON