CVE-2019-25468 - NetGain EM Plus 10.1.68 Remote Code Execution via script_test.jsp

Back Back to CVE browser

CRITICAL

NetGain EM Plus 10.1.68 Remote Code Execution via script_test.jsp

Published Mar 11, 2026

9.3

CRITICAL

CVSS 4.0

EPSS 0.76%

Description

NetGain EM Plus 10.1.68 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary system commands by submitting malicious parameters to the script_test.jsp endpoint. Attackers can send POST requests with shell commands embedded in the 'content' parameter to execute code and retrieve command output.

Affected products

Vendor NetGain Systems Product NetGain EM Plus Default
unaffected
- Version
  10.1.68
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

NetGain Systems

NetGain EM Plus

unaffected

Version	Status	Constraints
10.1.68	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-94

Code Injection

References (3)

http://netgain-systems.com
product
https://www.exploit-db.com/exploits/47391
exploit
https://www.vulncheck.com/advisories/netgain-em-plus-remote-code-execution-via-script-test-jsp
third-party-advisory

Link	Providers	Tags
http://netgain-systems.com		product
https://www.exploit-db.com/exploits/47391		exploit
https://www.vulncheck.com/advisories/netgain-em-plus-remote-code-execution-via-script-test-jsp		third-party-advisory