Lucene search
HistorySep 02, 2014 - 2:55 p.m.
CVE-2014-5521
cve-2014-5521
xrms crm
remote code execution
shell metacharacters
fingeruser.php
nvd
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
7.7 High
AI Score
Confidence
Low
0.017 Low
EPSS
Percentile
87.7%
plugins/useradmin/fingeruser.php in XRMS CRM, possibly 1.99.2, allows remote authenticated users to execute arbitrary code via shell metacharacters in the username parameter.
Affected configurations
Node
xrms_crm_projectxrms_crmMatch1.99.2
| CPE | Name | Operator | Version |
|---|---|---|---|
| xrms_crm_project:xrms_crm | xrms crm project xrms crm | eq | 1.99.2 |
Related
nvd
nvd
CVE-2014-5521
2014-09-02 14:55:03
cvelist
cvelist
CVE-2014-5521
2014-09-02 14:00:00
prion
prion
Code injection
2014-09-02 14:55:00
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
7.7 High
AI Score
Confidence
Low
0.017 Low
EPSS
Percentile
87.7%
Related for CVE-2014-5521