| Reporter | Title | Published | Views | Family All 27 |
|---|---|---|---|---|
| Ganglia Web Frontend < 3.5.1 - PHP Code Execution Exploit | 31 Aug 201500:00 | – | zdt | |
| CVE-2012-3448 | 6 Aug 201218:00 | – | cvelist | |
| [SECURITY] [DSA 2610-1] ganglia security update | 21 Jan 201320:32 | – | debian | |
| CVE-2012-3448 | 6 Aug 201218:00 | – | debiancve | |
| Debian DSA-2610-1 : ganglia - arbitrary script execution | 22 Jan 201300:00 | – | nessus | |
| Fedora 17 : ganglia-3.1.7-6.fc17 (2012-10699) | 26 Jul 201200:00 | – | nessus | |
| Fedora 16 : ganglia-3.1.7-5.fc16 (2012-10727) | 26 Jul 201200:00 | – | nessus | |
| GLSA-201412-10 : Multiple packages, Multiple vulnerabilities fixed in 2012 | 15 Dec 201400:00 | – | nessus | |
| Ganglia Web Frontend < 3.5.1 - PHP Code Execution | 31 Aug 201500:00 | – | exploitdb | |
| Ganglia Web Frontend 3.5.1 - PHP Code Execution | 31 Aug 201500:00 | – | exploitpack |
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| g | query param | ganglia/graph.php?g=../../../../tmp/attack&metric=DUMMY&title=DUMMY | CVE-2012-3448 PoC demonstrates remote PHP code execution via Ganglia Web before 3.5.1 by crafting g parameter to access /tmp/attack and execute payload. | CWE-94 |
| metric | query param | ganglia/graph.php?g=../../../../tmp/attack&metric=DUMMY&title=DUMMY | CVE-2012-3448 PoC demonstrates remote PHP code execution via Ganglia Web before 3.5.1 by crafting g parameter to access /tmp/attack and execute payload. | CWE-94 |
| title | query param | ganglia/graph.php?g=../../../../tmp/attack&metric=DUMMY&title=DUMMY | CVE-2012-3448 PoC demonstrates remote PHP code execution via Ganglia Web before 3.5.1 by crafting g parameter to access /tmp/attack and execute payload. | CWE-94 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation