漏洞分类 — 代码执行

英文名字
Code Execution
漏洞详情：
代码执行漏洞是用户通过浏览器提交执行命令，由于服务器端没有针对执行函数做过滤，导致在没有指定绝对路径的情况下就执行命令，可能会允许攻击者通过改变 $PATH 或程序执行环境的其他方面来执行一个恶意构造的代码。

相关漏洞

SSV ID 漏洞名称
SSV-11909 Microsoft Visual Studio和Internet Explorer未明远程代码执行漏洞
SSV-11883 Joomla Extension UIajaxIM 1.1 JavaScript Execution Vulnerability
SSV-11867 Adobe Acrobat, Reader和Flash Player远程代码执行漏洞
SSV-11865 DD-WRT (httpd service) Remote Command Execution Vulnerability
SSV-11844 Google Chrome JavaScript规则表达式处理远程代码执行漏洞
SSV-11825 Discuz! admin\styles.inc.php get-webshell bug
SSV-11819 Microsoft DirectX QuickTime媒体文件解析代码执行漏洞(MS09-028)
SSV-11786 Winds3D Viewer GetURL()函数远程代码执行漏洞
SSV-11771 OCS Inventory NG代理Backend.pm Perl模块处理代码执行漏洞
SSV-11697 Zen Cart 1.3.8 Remote Code Execution Exploit
SSV-11680 MyBB <= 1.4.6 Remote Code Execution Exploit
SSV-11645 Mozilla Firefox 'NPObject'访问远程代码执行漏洞
SSV-11635 SugarCRM 5.2.0e Remote Code Execution Vulnerability
SSV-11621 'Compress::Raw::Zlib' Perl模块远程代码执行漏洞
SSV-12950 DB Top Sites 1.0 Remote Command Execution Exploit
SSV-11614 Microsoft Windows RPC分组引擎远程代码执行漏洞(MS09-026)
SSV-11582 Microsoft活动目录服务LDAP报文内存破坏漏洞(MS09-018)
SSV-11524 Kloxo 5.75 (24 Issues) Multiple Remote Vulnerabilities
SSV-11515 Podcast Generator <= 1.2 unauthorized Re-Installation Remote Exploit
SSV-11484 ecshop 2.6.2 Multiple Remote Command Execution Vulnerabilities
SSV-11420 Soulseek 157 NS */ 156.* Remote Distributed Search Code Execution
SSV-11402 中国游戏中心游戏大厅 (CGAgent.dll) ActiveX Remote Code Execution Exploit
SSV-11390 BaoFeng (config.dll) ActiveX Remote Code Execution Exploit
SSV-13011 ChinaGames (CGAgent.dll) ActiveX Remote Code Execution Exploit
SSV-11377 NC GBook 1.0 Remote Command injection Exploit
SSV-11307 Microsoft PowerPoint Sound Data (CVE-2009-0225)远程代码执行漏洞
SSV-11301 Microsoft PowerPoint PP4X32.DLL库多个栈溢出漏洞（MS09-017）
SSV-11311 StrawBerry 1.1.1 LFI / Remote Command Execution Exploit
SSV-11282 Microsoft PowerPoint多个安全漏洞
SSV-11275 Bitweaver <= 2.6 saveFeed() Remote Code Execution Exploit
SSV-11258 TinyWebGallery <= 1.7.6 LFI / Remote Code Execution Exploit
SSV-11197 eLitius 1.0 Remote Command Execution Exploit
SSV-11130 Adobe 8.1.4/9.1 customDictionaryOpen() Code Execution Exploit
SSV-11129 Adobe Reader 8.1.4/9.1 GetAnnots() Remote Code Execution Exploit
SSV-13028 Autodesk IDrop ActiveX Remote Code Execution Exploit
SSV-11108 LightBlog <= 9.9.2 (register.php) Remote Code Execution Exploit
SSV-11083 Dokeos LMS <= 1.8.5 (include) Remote Code Execution Exploit
SSV-11036 DNS Tools (PHP Digger) Remote Command Execution Vuln
SSV-10927 Podcast Generator <= 1.1 Remote Code Execution Exploit
SSV-10915 X-Forum 0.6.2 Remote Command Execution Exploit
SSV-10900 My Simple Forum 7.1 (LFI) Remote Command Execution Exploit
SSV-10879 PHPizabi v0.848b C1 HFP1-3 Remote Command Execution Exploit
SSV-10851 Hannon Hill Cascade Server Command Execution Vulnerability (post auth)
SSV-10839 Facil-CMS 0.1RC2 Multiple Remote Vulnerabilities
SSV-10771 SupportSoft DNA Editor Module (dnaedit.dll) Code Execution Exploit
SSV-13070 Imera ImeraIEPlugin ActiveX Control Remote Code Execution Exploit
SSV-10760 Joomla/Mambo Component eXtplorer Code Execution Vulnerability
SSV-10739 Hex Workshop v6 (.HEX File) Local Code Execution Exploit
SSV-10716 pPIM 1.01 (notes.php id) Remote Command Execution Exploit
SSV-10656 Firepack (admin/ref.php) Remote Code Execution Exploit
SSV-4783 FreeBSD 'telnetd' Daemon Remote Code Execution Vulnerability
SSV-10632 ea-gBook 0.1 Remote Command Execution with RFI (c99) Exploit
SSV-10629 Jieqi cms <= 1.5 remote code execution exploit
SSV-10602 ZeroShell <= 1.0beta11 Remote Code Execution Vulnerability
SSV-10590 Hedgehog-CMS <= 1.21 Remote Command Execution Exploit
SSV-10599 Hedgehog-CMS 1.21 (LFI) Remote Command Execution Exploit
SSV-10589 PHP Director <= 0.21 Remote Command Execution Exploit
SSV-10580 1024 CMS <= 1.4.4 Remote Command Execution with RFI (c99) Exploit
SSV-10545 phpslash &lt;= 0.8.1.1 Remote Code Execution Exploit
SSV-10541 RealVNC 4.1.2 (vncviewer.exe) RFB Protocol Remote Code Execution PoC
SSV-10546 OpenHelpDesk 1.0.100 eval() Code Execution Exploit (meta)
SSV-10523 WOW - Web On Windows ActiveX Control 2 Remote Code Execution
SSV-17820 eVision CMS 2.0 Remote Code Execution Exploit
SSV-17767 MemHT Portal &lt;= 4.0.1 (avatar) Remote Code Execution Exploit
SSV-10476 Oracle Secure Backup 10g exec_qr() Command Injection Vulnerability
SSV-4656 Wordpress 2.7.0 admin remote code execution vulnerability
SSV-10450 fttss &lt;= 2.0 Remote Command Execution Vulnerability
SSV-10433 XOOPS 2.3.2 (mydirname) Remote PHP Code Execution Exploit
SSV-10306 RoundCube Webmail &lt;= 0.2-3 beta Code Execution Vulnerability
SSV-10309 RoundCube Webmail &lt;= 0.2b Remote Code Execution Exploit
SSV-10266 Phoenician Casino FlashAX ActiveX Remote Code Execution Exploit
SSV-10231 SUMON &lt;= 0.7.0 (chg.php host) Command Execution Vulnerability
SSV-17616 Moodle 1.9.3 Remote Code Execution Vulnerability
SSV-17617 VP-ASP Shopping Cart 6.50 Database Disclosure Vulnerability
SSV-10200 MG2 0.5.1 (filename) Remote Code Execution Vulnerability
SSV-4501 Vim多个插件字符转义任意命令执行漏洞
SSV-10086 Goople Cms 1.7 Arbitrary Code Execution Vulnerability
SSV-10082 verlihub &lt;= 0.9.8d-RC2 Remote Command Execution Vulnerability
SSV-10080 KVIrc 3.4.2 Shiny (uri handler) Remote Command Execution Exploit
SSV-10057 No-IP DUC &lt;= 2.1.7 Remote Code Execution Exploit
SSV-10044 MS Windows Server Service Code Execution Exploit (MS08-067) (2k/2k3)
SSV-17504 Discuz! 6.x/7.x Remote Code Execution Exploit
SSV-10002 FREEsimplePHPguestbook (guestbook.php) Remote Code Execution Vulnerability
SSV-17495 AJ Auction Authentication Bypass Vulnerability
SSV-17494 AJSquare Free Polling Script (DB) Multiple Vulnerabilities
SSV-9985 MemHT Portal &lt;= 4.0 Remote Code Execution Exploit
SSV-9948 DFLabs PTK &lt;= 1.0 Local Command Execution Vulnerability
SSV-9941 Simple Machines Forum (SMF) 1.1.6 Remote Code Execution Exploit
SSV-9856 Opera 9.62 (opera:allinone) Remote Code Execution Exploit PoC
SSV-9855 Opera 9.61 opera:historysearch Code Execution Exploit PoC
SSV-9838 Sepal SPBOARD 4.5 (board.cgi) Remote Command Exec Vulnerability
SSV-9835 H2O-CMS &lt;= 3.4 Remote Command Execution Exploit (mq = off)
SSV-9813 Ads Pro (dhtml.pl page) Remote Command Execution Exploit
SSV-9815 MS Windows Server Service Code Execution Exploit (MS08-067) (cn univ.)
SSV-9802 MS Windows Server Service Code Execution PoC (MS08-067)
SSV-9741 Mantis Bug Tracker &lt;= 1.1.3 Remote Code Execution Exploit
SSV-9727 PhpWebGallery &lt;= 1.7.2 Session Hijacking / Code Execution Exploit
SSV-9716 LokiCMS 0.3.4 writeconfig() Remote Command Execution Exploit
SSV-9696 Kusaba &lt;= 1.0.4 Remote Code Execution Exploit
SSV-17413 Kusaba &lt;= 1.0.4 Remote Code Execution Exploit #2
京ICP备10040895号 京公网安备 11010502034610号 Copyright @ 404 Team from Knownsec. English