USVN (aka User-friendly SVN) before 1.0.9 allows XSS via SVN logs.
OTCMS 3.61 allows remote attackers to execute arbitrary PHP code via the accBackupDir parameter.
The processCommandUploadLog() function of libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to execute arbitrary system commands as the root user.
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none.