CVE-2019-13475

🗓️ 09 Jul 2019 21:58:05Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 144 Views🌐 WEB

MobaXterm 11.1 mobaxterm: URI handler argument injection vulnerabilit

Reporter	Title	Published	Views	Family All 9
CNVD	Mobatek MobaXterm Command Injection Vulnerability	9 Jul 201900:00	–	cnvd
Cvelist	CVE-2019-13475	9 Jul 201921:58	–	cvelist
EUVD	EUVD-2019-4943	7 Oct 202500:30	–	euvd
Tenable Nessus	Mobatek MobaXterm 11.1 (CVE-2019-13475)	15 Mar 202400:00	–	nessus
NVD	CVE-2019-13475	9 Jul 201922:15	–	nvd
Prion	Design/Logic Flaw	9 Jul 201922:15	–	prion
RedhatCVE	CVE-2019-13475	22 May 202510:05	–	redhatcve
Vulnerability Lab	Mobatek MobaXterm v11.1 - Code Execution Vulnerability	7 Jul 201900:00	–	vulnerlab
Vulnerability Lab	Mobatek MobaXterm v11.1 - Code Execution Vulnerability	8 Jul 201900:00	–	vulnerlab

NVD

Node

mobatek mobaxtermMatch11.1

Source	Link
vulnerability-lab	www.vulnerability-lab.com/get_content.php

Parameter	Position	Path	Description	CWE
-exec	path	mobaxterm:	URI handler argument injection leading to remote code execution when user visits a crafted mobaxterm: URL.	CWE-88
-hideterm	path	mobaxterm:	URI handler argument injection leading to remote code execution when user visits a crafted mobaxterm: URL.	CWE-88
-exitwhendone	path	mobaxterm:	URI handler argument injection leading to remote code execution when user visits a crafted mobaxterm: URL.	CWE-88

21 Nov 2024 04:24Current

8.9High risk

Vulners AI Score8.9

CVSS 26.8

CVSS 38.8

EPSS0.00896

mobaxterm uri handler argument injection vulnerability remote attackers arbitrary commands command-line payload attack