CVE-2007-2935

Опубликовано: 31 мая 2007

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

core/spellcheck/spellcheck.php in Fundanemt before 2.2.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the dict parameter.

Ссылки

http://osvdb.org/36657
http://secunia.com/advisories/25421
Patch
Vendor Advisory
http://www.fundanemt.org/newsarchive/?number=23
http://www.securityfocus.com/bid/24185
https://exchange.xforce.ibmcloud.com/vulnerabilities/34543
https://www.exploit-db.com/exploits/3998
http://osvdb.org/36657
http://secunia.com/advisories/25421
Patch
Vendor Advisory
http://www.fundanemt.org/newsarchive/?number=23
http://www.securityfocus.com/bid/24185
https://exchange.xforce.ibmcloud.com/vulnerabilities/34543
https://www.exploit-db.com/exploits/3998

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:fundanemt:fundanemt:*:*:*:*:*:*:*:*

Версия до 2.2 (включая)

EPSS

Процентиль: 93%

0.09477

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-6wcx-jx84-v629

github

почти 4 года назад