Lucene search

MitreCVE-2002-1461

HistoryJun 09, 2003 - 4:00 a.m.

CVE-2002-1461

2003-06-0904:00:00

mitre

web.nvd.nist.gov

cve-2002-1461

web shop manager

remote code execution

shell metacharacters

security vulnerability

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

Confidence

High

EPSS

0.01

Percentile

83.6%

JSON

Web Shop Manager 1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the search box.

Affected configurations

Nvd

Node

webscriptworldweb_shop_managerMatch1.1

VendorProductVersionCPE
webscriptworldweb_shop_manager1.1cpe:2.3:a:webscriptworld:web_shop_manager:1.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
webscriptworld	web_shop_manager	1.1	cpe:2.3:a:webscriptworld:web_shop_manager:1.1:::::::*

References

archives.neohapsis.com/archives/bugtraq/2002-08/0130.html

www.iss.net/security_center/static/9817.php

www.securiteam.com/securitynews/5KP0G0080E.html

www.securityfocus.com/bid/5474

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

Confidence

High

EPSS

0.01

Percentile

83.6%

JSON

Related for CVE-2002-1461