9

CVE-2008-7125

pphoto in Ariadne before 2.6 allows remote authenticated users with certain privileges to execute arbitrary shell commands via vectors related to PINP programs and the annotate command.  NOTE: some of these details are obtained from third party information.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ariadne-cms ≫ Ariadne Cms Version <= 2.4.1
Ariadne-cms ≫ Ariadne Cms Version2.4
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.24% 0.805
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9 8 10
AV:N/AC:L/Au:S/C:C/I:C/A:C
CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

http://osvdb.org/43055
http://secunia.com/advisories/29191
Vendor Advisory
http://www.ariadne-cms.org/download/changes/
Patch
http://www.securityfocus.com/bid/28093
https://exchange.xforce.ibmcloud.com/vulnerabilities/40989