CVE-2013-3506

2013-05-0810:00:00

mitre

www.cve.org

remote execution

cgi vulnerability

groundwork monitor enterprise

AI Score

7.6

Confidence

High

EPSS

0.006

Percentile

79.4%

JSON

cgi-bin/performance/perfchart.cgi in the Performance component in GroundWork Monitor Enterprise 6.7.0 does not properly restrict XML content, which allows remote attackers to execute arbitrary commands by creating a .shtml file and leveraging Server Side Includes (SSI) functionality.