PT-2010-4155 · Miyabi · Miyabi Cgi Tools Seo Links

Publicado 2010-07-02 · Atualizado 2017-08-17 · CVE-2010-2626

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Miyabi CGI Tools SEO Links version 1.02

Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in the fn command. This can be exploited by including specific characters in the command to bypass security restrictions.

Recommendations For version 1.02, consider restricting access to the index.pl file or disabling the execution of the fn command until a patch is available. As a temporary workaround, avoid using shell metacharacters in the fn command to minimize the risk of exploitation.

Exploit

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2010-2626

Produtos afetados

Miyabi Cgi Tools Seo Links

Referências · 8

• 🔥 https://exploit-db.com/exploits/34223 · Exploit
• 🔥 http://securityfocus.com/bid/41228 · Exploit
• 🔥 http://archives.neohapsis.com/archives/fulldisclosure/2010-06/0615.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2010-2626 · Nota de Segurança
• http://secunia.com/advisories/40419 · Aviso do Fabricante
• http://osvdb.org/65884 · Nota
• http://archives.neohapsis.com/archives/fulldisclosure/2010-06/0614.html · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/59908 · Nota