Lucene search
HistoryAug 30, 2012 - 10:55 p.m.
CVE-2011-5130
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.6 High
AI Score
Confidence
High
0.77 High
EPSS
Percentile
98.2%
dev/less.php in Family Connections CMS (FCMS) 2.5.0 - 2.7.1, when register_globals is enabled, allows remote attackers to execute arbitrary commands via shell metacharacters in the argv[1] parameter.
Affected configurations
Node
haudenschiltfamily_connections_cmsMatch2.5.0
ORhaudenschiltfamily_connections_cmsMatch2.5.1
ORhaudenschiltfamily_connections_cmsMatch2.5.2
ORhaudenschiltfamily_connections_cmsMatch2.5.3
ORhaudenschiltfamily_connections_cmsMatch2.5.4
ORhaudenschiltfamily_connections_cmsMatch2.6.0
ORhaudenschiltfamily_connections_cmsMatch2.7.0
ORhaudenschiltfamily_connections_cmsMatch2.7.1
Related
openvas
openvas
cvelist
cvelist
CVE-2011-5130
2012-08-30 22:00:00
cve
cve
CVE-2011-5130
2012-08-30 22:55:03
prion
prion
Code injection
2012-08-30 22:55:00
dsquare
dsquare
Family connections CMS 2.7.1 RCE (Linux)
2012-03-19 00:00:00
Family connections CMS 2.7.1 RCE (Windows)
2012-03-19 00:00:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.6 High
AI Score
Confidence
High
0.77 High
EPSS
Percentile
98.2%
Related for NVD:CVE-2011-5130