PT-2008-1595 · Xml2Owl · Xml2Owl

Mhz91 · Publicado 2008-01-04 · Atualizado 2017-09-29 · CVE-2007-6632

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions xml2owl version 0.1.1

Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in the path parameter of the showCode.php file.

Recommendations For xml2owl version 0.1.1, consider restricting access to the showCode.php file or sanitizing the path parameter to prevent the execution of arbitrary commands until a patch is available.

Exploit

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2007-6632

Produtos afetados

Xml2Owl

Referências · 6

• 🔥 http://inj3ct-it.org/exploit/xml2owl-0.1.1.rce.txt · Exploit
• 🔥 https://exploit-db.com/exploits/4800 · Exploit
• http://securityfocus.com/bid/27050 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-6632 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39327 · Nota
• http://osvdb.org/39880 · Nota