exploitDog

CVE-2009-4025

Опубликовано: 29 нояб. 2009

Источник: nvd

CVSS2: 10

EPSS Низкий

Описание

Argument injection vulnerability in the traceroute function in Traceroute.php in the Net_Traceroute package before 0.21.2 for PEAR allows remote attackers to execute arbitrary shell commands via the host parameter. NOTE: some of these details are obtained from third party information.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:pear:pear:*:*:*:*:*:*:*:*

Версия до 0.21.1 (включая)

cpe:2.3:a:pear:pear:0.11:*:*:*:*:*:*:*

cpe:2.3:a:pear:pear:0.20:*:*:*:*:*:*:*

cpe:2.3:a:pear:pear:0.21:*:*:*:*:*:*:*

EPSS

Процентиль: 90%

0.05802

Низкий

10 Critical

CVSS2

Дефекты

CWE-78

Связанные уязвимости

GHSA-54vq-c3mg-r28r

github

почти 4 года назад

Argument injection vulnerability in the traceroute function in Traceroute.php in the Net_Traceroute package before 0.21.2 for PEAR allows remote attackers to execute arbitrary shell commands via the host parameter. NOTE: some of these details are obtained from third party information.

EPSS

Процентиль: 90%

0.05802

Низкий

10 Critical

CVSS2

Дефекты

CWE-78