PT-2010-4155 · Miyabi · Miyabi Cgi Tools Seo Links

Published 2010-07-02 · Updated 2017-08-17 · CVE-2010-2626

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Miyabi CGI Tools SEO Links version 1.02

Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in the fn command. This can be exploited by including specific characters in the command to bypass security restrictions.

Recommendations For version 1.02, consider restricting access to the index.pl file or disabling the execution of the fn command until a patch is available. As a temporary workaround, avoid using shell metacharacters in the fn command to minimize the risk of exploitation.

Exploit

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2010-2626

Affected Products

Miyabi Cgi Tools Seo Links

References · 8

• 🔥 https://exploit-db.com/exploits/34223 · Exploit
• 🔥 http://securityfocus.com/bid/41228 · Exploit
• 🔥 http://archives.neohapsis.com/archives/fulldisclosure/2010-06/0615.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2010-2626 · Security Note
• http://secunia.com/advisories/40419 · Vendor Advisory
• http://osvdb.org/65884 · Note
• http://archives.neohapsis.com/archives/fulldisclosure/2010-06/0614.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/59908 · Note