SOUND4 Impact/Pulse/First/Eco Unauthenticated Command Injection Vulnerability in Username Parameter

A command injection vulnerability has been identified in SOUND4 Impact, Pulse, First, and Eco versions 2.x and below. This vulnerability allows unauthenticated attackers to inject and execute arbitrary shell commands via the 'username' parameter in HTTP POST requests. The issue arises in the 'index.php' and 'login.php' scripts.

Impact

Exploitation of this vulnerability allows for arbitrary command execution on the server where the application is running.

Reproduction

To reproduce this vulnerability, send a POST request to 'index.php' or 'login.php' with a crafted 'username' parameter that includes the desired shell commands. The commands will be executed on the server, and the response can be used to verify the execution.