VMTurbo - vmtadmin.cgi RCE Detection (CVE-2014-5073)

Detects CVE-2014-5073 by injecting a backtick command via vmtadmin.cgi fileDate that writes a marker into /tmp/vmtbackup.zip. !/usr/bin/env python3 -- coding: utf-8 -- """VMTurbo Operations Manager vmtadmin.cgi RCE CVE-2014-5073.""" from kittysploit import from lib.protocols.http.httpclient impor...

CVE-2014-5073

vmtadmin.cgi in VMTurbo Operations Manager before 4.6 build 28657 allows remote attackers to execute arbitrary commands via shell metacharacters in the fileDate parameter in a DOWN call...

CVE-2014-5073

CVE-2014-5073 affects VMTurbo Operations Manager (vmtadmin.cgi) prior to 4.6 build 28657. The vulnerability allows remote command execution via shell metacharacters in the fileDate parameter of a DOWN call, enabling arbitrary commands. Connected sources indicate public exploitation/public PoCs an...

Code injection

vmtadmin.cgi in VMTurbo Operations Manager before 4.6 build 28657 allows remote attackers to execute arbitrary commands via shell metacharacters in the fileDate parameter in a DOWN call...

CVE-2014-5073: Undefined Security Weakness

vmtadmin.cgi in VMTurbo Operations Manager before 4.6 build 28657 allows remote attackers to execute arbitrary commands via shell metacharacters in the fileDate parameter in a DOWN call...

PT-2014-6265

Name of the Vulnerable Software and Affected Versions VMTurbo Operations Manager versions prior to 4.6 build 28657 Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in the fileDate parameter in a "DOWN" call to the 'vmtadmin.cgi' endpoint...