Lucene search
HistoryOct 03, 2022 - 4:14 p.m.
CVE-2013-7418
cve-2013-7418
ipcop
firewall
remote code execution
metacharacters
xss
vulnerability
6.2 Medium
AI Score
Confidence
High
6.5 Medium
CVSS2
Access Vector
Access Complexity
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
0.009 Low
EPSS
Percentile
82.9%
cgi-bin/iptablesgui.cgi in IPCop (aka IPCop Firewall) before 2.1.5 allows remote authenticated users to execute arbitrary code via shell metacharacters in the TABLE parameter. NOTE: this can be exploited remotely by leveraging a separate cross-site scripting (XSS) vulnerability.
Affected configurations
Node
ipcopipcopRange≤2.1.4
| CPE | Name | Operator | Version |
|---|---|---|---|
| ipcop:ipcop | ipcop | le | 2.1.4 |
Related
prion
prion
Cross site scripting
2015-01-02 22:59:00
cvelist
cvelist
CVE-2013-7418
2022-10-03 16:14:53
nvd
nvd
CVE-2013-7418
2015-01-02 22:59:00
6.2 Medium
AI Score
Confidence
High
6.5 Medium
CVSS2
Access Vector
Access Complexity
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
0.009 Low
EPSS
Percentile
82.9%
Related for CVE-2013-7418