CVE-2013-2093

Опубликовано: 20 нояб. 2019

Источник: nvd

CVSS3: 9.8

CVSS2: 10

EPSS Низкий

Описание

Dolibarr ERP/CRM 3.3.1 does not properly validate user input in viewimage.php and barcode.lib.php which allows remote attackers to execute arbitrary commands.

Ссылки

http://www.openwall.com/lists/oss-security/2013/05/14/3
Mailing List
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/84249
Third Party Advisory
VDB Entry
https://github.com/Dolibarr/dolibarr/commit/526a80dd202bbca396687a502d52c27e06e97fff
Patch
Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2013-2093
Third Party Advisory
http://www.openwall.com/lists/oss-security/2013/05/14/3
Mailing List
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/84249
Third Party Advisory
VDB Entry
https://github.com/Dolibarr/dolibarr/commit/526a80dd202bbca396687a502d52c27e06e97fff
Patch
Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2013-2093
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:dolibarr:dolibarr_erp\/crm:3.3.1:*:*:*:*:*:*:*

EPSS

Процентиль: 92%

0.05219

Низкий

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVE-2013-2093

CVSS3: 9.8

ubuntu

больше 6 лет назад

Dolibarr ERP/CRM 3.3.1 does not properly validate user input in viewimage.php and barcode.lib.php which allows remote attackers to execute arbitrary commands.

CVE-2013-2093

CVSS3: 9.8

debian

больше 6 лет назад

Dolibarr ERP/CRM 3.3.1 does not properly validate user input in viewim ...

GHSA-767j-5hqp-hp5j

CVSS3: 9.8

github

больше 4 лет назад

Dolibarr ERP/CRM 3.3.1 does not properly validate user input in viewimage.php and barcode.lib.php which allows remote attackers to execute arbitrary commands.

EPSS

Процентиль: 92%

0.05219

Низкий

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-20