Smartphone Pentest Framework@* Security Vulnerabilities and Issues — Smartphone Pentest Framework@* CVE List

Lucene search

BulbsecuritySmartphone Pentest Framework*

4 matches found

CVE•added 2020/01/03 8:15 p.m.•164 views

CVE-2012-5878

Bulb Security Smartphone Pentest Framework (SPF) 0.1.2 through 0.1.4 allows remote attackers to execute arbitrary commands via shell metacharacters in the hostingPath parameter to (1) SEAttack.pl or (2) CSAttack.pl in frameworkgui/ or the (3) appURLPath parameter to frameworkgui/attachMobileModem.p...

10CVSS9.3AI score0.10613EPSS

Web

CVE•added 2020/01/03 8:15 p.m.•163 views

CVE-2012-5693

Bulb Security Smartphone Pentest Framework (SPF) before 0.1.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the ipAddressTB parameter to (1) remoteAttack.pl or (2) guessPassword.pl in frameworkgui/; the filename parameter to (3) CSAttack.pl or (4) SEAttack.pl in ...

8.8CVSS9.3AI score0.10613EPSS

Web

CVE•added 2014/10/20 4:55 p.m.•48 views

CVE-2012-5697

The btinstall installation script in Bulb Security Smartphone Pentest Framework (SPF) before 0.1.3 uses weak permissions (777) for all files in the frameworkgui/ directory, which allows local users to obtain sensitive information or inject arbitrary Perl code via direct access to these files.

4.6CVSS8.1AI score0.00044EPSS

CVE•added 2014/10/20 4:55 p.m.•36 views

CVE-2012-5696

Bulb Security Smartphone Pentest Framework (SPF) before 0.1.3 does not properly restrict access to frameworkgui/config, which allows remote attackers to obtain the plaintext database password via a direct request.

5CVSS8.5AI score0.0025EPSS