PT-2012-4692 · Basilic · Basilic

Henri Salo

·

CVE-2012-3399

·

Publicado

2012-07-12

·

Atualizado

2017-08-29

CVSS v2.0

7.5

Alta

VetorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Basilic version 1.5.14
Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in the file parameter in the Config/diff.php file.
Recommendations For Basilic version 1.5.14, consider restricting access to the Config/diff.php file to minimize the risk of exploitation. Avoid using shell metacharacters in the file parameter until the issue is resolved.

Exploit

Correção

DoS

RCE

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2012-3399

Produtos afetados

Basilic