Lucene search
HistoryOct 09, 2012 - 3:55 p.m.
CVE-2012-5347
cve
2012
5347
tinywebgallery
remote attackers
arbitrary code
shell metacharacters
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.1 High
AI Score
Confidence
Low
0.28 Low
EPSS
Percentile
96.9%
TinyWebGallery 1.8.3 allows remote attackers to execute arbitrary code via shell metacharacters in the command parameter to (1) inc/filefunctions.inc or (2) info.php.
Affected configurations
Node
tinywebgallerytinywebgalleryMatch1.8.3
| CPE | Name | Operator | Version |
|---|---|---|---|
| tinywebgallery:tinywebgallery | tinywebgallery | eq | 1.8.3 |
Related
cvelist
cvelist
CVE-2012-5347
2012-10-09 15:00:00
prion
prion
Command injection
2012-10-09 15:55:00
nvd
nvd
CVE-2012-5347
2012-10-09 15:55:01
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.1 High
AI Score
Confidence
Low
0.28 Low
EPSS
Percentile
96.9%
Related for CVE-2012-5347