CVE-2015-5453

creationtimestamp| type| source ---|---|--- 2015-09-28 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38346 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/freebsd/http/watchguardcmdexec.rb 2025-02-06 03:13:42+00:00| see...

CVE-2015-5453

CVE-2015-5453 affects WatchGuard XCS 9.2 and 10.0 before build 150522. The root cause is failure to filter shell metacharacters in the id parameter of ADMIN/mailqueue.spl, enabling a remote authenticated user to execute arbitrary commands. Public writeups confirm exploitable paths via web interfa...