CVE-2013-7418

2022-10-0316:14:53

mitre

www.cve.org

cve-2013-7418

ipcop firewall

remote code execution

authenticated users

shell metacharacters

cross-site scripting

xss vulnerability

6.1 Medium

AI Score

Confidence

High

0.009 Low

EPSS

Percentile

83.0%

JSON

cgi-bin/iptablesgui.cgi in IPCop (aka IPCop Firewall) before 2.1.5 allows remote authenticated users to execute arbitrary code via shell metacharacters in the TABLE parameter. NOTE: this can be exploited remotely by leveraging a separate cross-site scripting (XSS) vulnerability.