Описание
The findMacroMarker function in parserLib.pas in Rejetto HTTP File Server (aks HFS or HttpFileServer) 2.3x before 2.3c allows remote attackers to execute arbitrary programs via a %00 sequence in a search action.
Ссылки
- ExploitThird Party AdvisoryVDB Entry
- ExploitThird Party AdvisoryVDB Entry
- ExploitThird Party AdvisoryVDB Entry
- ExploitThird Party AdvisoryVDB Entry
- Third Party AdvisoryUS Government Resource
- Exploit
- ExploitThird Party AdvisoryVDB Entry
- ExploitThird Party AdvisoryVDB Entry
- ExploitThird Party AdvisoryVDB Entry
- ExploitThird Party AdvisoryVDB Entry
- ExploitThird Party AdvisoryVDB Entry
- Third Party AdvisoryUS Government Resource
- Exploit
- ExploitThird Party AdvisoryVDB Entry
Уязвимые конфигурации
Конфигурация 1Версия от 2.3 (включая) до 2.3c (исключая)
cpe:2.3:a:rejetto:http_file_server:*:*:*:*:*:*:*:*
EPSS
Процентиль: 100%
0.94363
Критический
9.8 Critical
CVSS3
10 Critical
CVSS2
Дефекты
CWE-94
CWE-94
Связанные уязвимости
CVSS3: 9.8
github
больше 3 лет назад
The findMacroMarker function in parserLib.pas in Rejetto HTTP File Server (aks HFS or HttpFileServer) 2.3x before 2.3c allows remote attackers to execute arbitrary programs via a %00 sequence in a search action.
EPSS
Процентиль: 100%
0.94363
Критический
9.8 Critical
CVSS3
10 Critical
CVSS2
Дефекты
CWE-94
CWE-94