CVE-2012-1795

webglimpse.cgi in Webglimpse before 2.20.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the query…

mitre·CWE-78·Published 2012-03-20

CVSS

—

EPSS

0.04

KEV

Exploits

cve.orgen

185 chars

webglimpse.cgi in Webglimpse before 2.20.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the query parameter, as exploited in the wild in March 2012.

NVDen

185 chars

webglimpse.cgi in Webglimpse before 2.20.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the query parameter, as exploited in the wild in March 2012.

NVDes

186 chars

webglimpse.cgi en WebGlimpse antes de v2.20.0 permite a atacantes remotos ejecutar comandos arbitrarios vía metacaracteres en el parámetro query, tal como se explotaron en marzo de 2012.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	7.5	10.0	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P