Lucene search
HistoryMar 20, 2012 - 6:55 p.m.
CVE-2012-1795
cve-2012-1795
webglimpse
remote execution
shell metacharacters
nvd
7.8 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.015 Low
EPSS
Percentile
87.0%
webglimpse.cgi in Webglimpse before 2.20.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the query parameter, as exploited in the wild in March 2012.
Related
prion
prion
Code injection
2012-03-20 18:55:00
nessus
nessus
WebGlimpse query Parameter Command Injection
2012-03-21 00:00:00
dsquare
dsquare
WebGlimpse 2.18.8 RCE
2012-05-14 00:00:00
7.8 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.015 Low
EPSS
Percentile
87.0%
Related for CVE-2012-1795