PT-2008-1595 · Xml2Owl · Xml2Owl

Mhz91 · Published 2008-01-04 · Updated 2017-09-29 · CVE-2007-6632

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions xml2owl version 0.1.1

Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in the path parameter of the showCode.php file.

Recommendations For xml2owl version 0.1.1, consider restricting access to the showCode.php file or sanitizing the path parameter to prevent the execution of arbitrary commands until a patch is available.

Exploit

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2007-6632

Affected Products

Xml2Owl

References · 6

• 🔥 http://inj3ct-it.org/exploit/xml2owl-0.1.1.rce.txt · Exploit
• 🔥 https://exploit-db.com/exploits/4800 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-6632 · Security Note
• http://securityfocus.com/bid/27050 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39327 · Note
• http://osvdb.org/39880 · Note