Lucene search
+L

opendreambox Operating System Command Injection Vulnerability

🗓️ 13 Nov 2017 00:00:00Reported by China National Vulnerability DatabaseType 
cnvd
 cnvd
🔗 www.cnvd.org.cn👁 25 Views

opendreambox webadmin plugin has a command injection in Script.py via command parameter at /script.

Related
Refs
ReporterTitlePublishedViews
Family
bdu_fstec
BDU FSTEC
WebAdmin Plugin Command Execution
18 Sep 201700:00
–bdu_fstec
circl
Circl
CVE-2017-14135
10 Nov 202400:00
–circl
checkpoint_advisories
Check Point Advisories
Dreambox Opendreambox Command Execution (CVE-2017-14135)
5 Apr 202000:00
–checkpoint_advisories
cve
CVE
CVE-2017-14135
4 Sep 201723:00
–cve
cvelist
Cvelist
CVE-2017-14135
4 Sep 201723:00
–cvelist
nuclei
Nuclei
OpenDreambox 2.0.0 - Remote Code Execution
24 Oct 202602:05
–nuclei
nvd
NVD
CVE-2017-14135
4 Sep 201723:29
–nvd
prion
Prion
Design/Logic Flaw
4 Sep 201723:29
–prion
ptsecurity
Positive Technologies
PT-2017-2824
4 Sep 201700:00
–ptsecurity
rapid7
Rapid7 Vulnerability Database (full)
CVE-2017-14135: Improper Neutralization of Special Elements used in an OS Command
4 Sep 201700:00
–rapid7
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

14 Nov 2017 00:00Current
8.3High risk
Vulners AI Score8.3
CVSS 39.8
CVSS 210
EPSS0.21842
25