Code injection

2007-11-1002:46:00

PRIOn knowledge base

www.prio-n.com

7.3 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

73.8%

JSON

OpenBase 10.0.5 and earlier allows remote authenticated users to execute arbitrary commands via shell metacharacters in arguments to the (1) AsciiBackup, (2) OEMLicenseInstall, and possibly other stored procedures.

CPENameOperatorVersion
openbasele10.0.5

CPE	Name	Operator	Version
	openbase	le	10.0.5

References

secunia.com/advisories/27525

www.netragard.com/pdfs/research/NETRAGARD-20070313-OPENBASE.txt

www.securityfocus.com/bid/26347

exchange.xforce.ibmcloud.com/vulnerabilities/38291