Design/Logic Flaw

cartridgerepository.rb in OpenShift Origin and Enterprise 1.2.8 through 2.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a Source-Url ending with a 1 .tar.gz, 2 .zip, 3 .tgz, or 4 .tar file extension in a cartridge manifest file...

CVE-2014-3496

cartridgerepository.rb in OpenShift Origin and Enterprise 1.2.8 through 2.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a Source-Url ending with a 1 .tar.gz, 2 .zip, 3 .tgz, or 4 .tar file extension in a cartridge manifest file...

PT-2014-5359 · Red Hat · Openshift Origin +1

Name of the Vulnerable Software and Affected Versions: OpenShift Origin and Enterprise versions 1.2.8 through 2.1.1 Description: The issue allows remote attackers to execute arbitrary commands via shell metacharacters in a Source-Url ending with certain file extensions in a cartridge manifest fil...

Origin: Command execution as root via downloadable cartridge source-url

cartridgerepository.rb in OpenShift Origin and Enterprise 1.2.8 through 2.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a Source-Url ending with a 1 .tar.gz, 2 .zip, 3 .tgz, or 4 .tar file extension in a cartridge manifest file...

Origin: Command execution as root via downloadable cartridge source-url

cartridgerepository.rb in OpenShift Origin and Enterprise 1.2.8 through 2.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a Source-Url ending with a 1 .tar.gz, 2 .zip, 3 .tgz, or 4 .tar file extension in a cartridge manifest file...

CVE-2013-4123

creationtimestamp| type| source ---|---|--- 2013-07-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/26886...

CVE-2013-4878

creationtimestamp| type| source ---|---|--- 2013-06-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/25986 2025-09-19 21:02:30+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lz7r6smitl2g...

CVE-2011-4275

creationtimestamp| type| source ---|---|--- 2013-02-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/24492 2013-02-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/24529 2013-04-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/24969 2013-10-20...

CVE-2013-1465

creationtimestamp| type| source ---|---|--- 2013-02-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/24465...

CVE-2012-5865

creationtimestamp| type| source ---|---|--- 2012-12-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/23253...

CVE-2011-4640

creationtimestamp| type| source ---|---|--- 2012-10-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37943...

CVE-2012-1769

creationtimestamp| type| source ---|---|--- 2012-07-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/19962...

CVE-2012-3576

creationtimestamp| type| source ---|---|--- 2012-06-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/19023 2025-05-02 17:00:09+00:00| published-proof-of-concept| Telegram/LSICrY0gcRIsk405uNpqA1GPRNRWrHt6G2acZwumbe6RcdQ...

CVE-2012-3578

creationtimestamp| type| source ---|---|--- 2012-06-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37370...

PHP Address Book 7.0 - Multiple Cross-Site Scripting Vulnerabilities

PHP Address Book 7.0 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/53598/info PHP Address Book is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to...

CVE-2012-6504

creationtimestamp| type| source ---|---|--- 2012-04-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18788...

CVE-2012-2104

creationtimestamp| type| source ---|---|--- 2012-04-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37084...

CVE-2012-4928

creationtimestamp| type| source ---|---|--- 2012-02-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36876...

CVE-2012-0025

creationtimestamp| type| source ---|---|--- 2011-12-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18256...

CVE-2010-4278

creationtimestamp| type| source ---|---|--- 2010-11-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15640...