漏洞分类 — 代码执行

英文名字
Code Execution
漏洞详情：
代码执行漏洞是用户通过浏览器提交执行命令，由于服务器端没有针对执行函数做过滤，导致在没有指定绝对路径的情况下就执行命令，可能会允许攻击者通过改变 $PATH 或程序执行环境的其他方面来执行一个恶意构造的代码。

相关漏洞

SSV ID 漏洞名称
SSV-9652 phpScheduleIt <= 1.2.10 (reserve.php) Remote Code Execution Exploit
SSV-9611 Yoxel <= 1.23beta (itpm_estimate.php a) Remote Code Execution Vuln
SSV-9573 Observer 0.3.2.1 Multiple Remote Command Execution Vulnerabilities
SSV-9551 Invision Power Board 2.* commands execution exploit by RST/GHC
SSV-9560 WebPortal CMS <= 0.7.4 (code) Remote Code Execution Vulnerability
SSV-9549 TWiki <= 4.2.2 (action) Remote Code Execution Vulnerability
SSV-9537 Advanced Electron Forum <= 1.0.6 Remote Code Execution Vulnerability
SSV-9478 minb 0.1.0 Remote Code Execution Exploit
SSV-9423 devalcms 1.4a XSS / Remote Code Execution Exploit
SSV-9415 Moodle <= 1.8.4 Remote Code Execution Exploit
SSV-9422 AWStats Totals (awstatstotals.php sort) Remote Code Execution Exploit
SSV-9367 Simple PHP Blog (SPHPBlog) <= 0.5.1 Code Execution Exploit
SSV-9283 IntelliTamper 2.07 HTTP Header Remote Code Execution Exploit
SSV-9261 Mozilla Firefox <= 1.0.4 "Set As Wallpaper" Code Execution Exploit
SSV-9253 LoveCMS 1.6.2 Final Remote Code Execution Exploit
SSV-9252 Multiple Wsn Products (LFI) Code Execution Vulnerability
SSV-9243 TGS CMS 0.3.2r2 Remote Code Execution Exploit
SSV-9225 Coppermine Photo Gallery <= 1.4.18 LFI / Remote Code Execution Exploit
SSV-9223 Symphony <= 1.7.01 (non-patched) Remote Code Execution Exploit
SSV-9219 Pligg <= 9.9.0 Remote Code Execution Exploit
SSV-9150 IntelliTamper 2.07 (server header) Remote Code Execution Exploit
SSV-9151 IntelliTamper 2.07 (map file) Local Arbitrary Code Execution Exploit (pl)
SSV-13190 IntelliTamper 2.07 (server header) Remote Code Execution Exploit
SSV-9131 PHPizabi 0.848b C1 HFP1 Remote Code Execution Exploit
SSV-9031 fuzzylime cms 3.01 (commrss.php) Remote Code Execution Exploit
SSV-9025 fuzzylime cms 3.01 (polladd.php poll) Remote Code Execution Exploit (pl)
SSV-9024 fuzzylime cms 3.01 (polladd.php poll) Remote Code Execution Exploit (php)
SSV-9018 Core Image Fun House <= 2.0 Arbitrary Code Execution PoC (OSX)
SSV-9002 Poppler <= 0.8.4 libpoppler uninitialized pointer Code Execution PoC
SSV-8988 Neutrino 0.8.4 Atomic Edition Remote Code Execution Exploit
SSV-8916 fuzzylime (cms) 3.01 Remote Command Execution Exploit
SSV-8893 PHP-Nuke Platinium <= 7.6.b.5 Remote Code Execution Exploit
SSV-8717 XChat <= 2.8.7b (URI Handler) Remote Code Execution Exploit (ie6/ie7)
SSV-8678 Mozilla Firefox Install Method Remote Arbitrary Code Execution Exploit
SSV-8679 Mozilla Firefox view-source:javascript url Code Execution Exploit
SSV-8656 Webmin BruteForce and Command Execution Exploit
SSV-8663 MS Windows 2000 WINS Remote Code Execution Exploit
SSV-8662 MS Internet Explorer Remote Code Execution with Parameters - PoC
SSV-8641 Icecast <= 2.0.1 Win32 Remote Code Execution Exploit (modded)
SSV-8566 1Book Guestbook Script Code Execution Vulnerability
SSV-8497 Alcatel OmniPCX Office 210/061.1 Remote Command Execution Vuln
SSV-8419 Open Office.org 2.31 swriter Local Code Execution Exploit
SSV-17224 ItCMS 1.9 (boxpop.php) Remote Code Execution Vulnerability
SSV-17221 OxYProject 0.85 (edithistory.php) Remote Code Execution Vulnerability
SSV-8372 YouTube Clone Script (spages.php) Remote Code Execution Exploit
SSV-8327 KwsPHP (Upload) Remote Code Execution Exploit
SSV-8295 FLABER <= 1.1 RC1 Remote Command Execution Exploit
SSV-8269 LinPHA <= 1.3.2 (maps plugin) Remote Command Execution Exploit
SSV-8287 CDNetworks Nefficient Download (NeffyLauncher.dll) Code Execution Vulnerabilities
SSV-8237 Real Player rmoc3260.dll ActiveX Control Remote Code Execution Exploit
SSV-8195 Microsoft Office Excel Code Execution Exploit (MS08-014)
SSV-8193 CenterIM <= 4.22.3 Remote Command Execution Vulnerability
SSV-17166 Mapbender <= 2.4.4 (mapFiler.php) Remote Code Execution Vulnerability
SSV-8101 PacerCMS 0.6 (last_module) Remote Code Execution Vulnerability
SSV-8102 SAPID CMF Build 87 (last_module) Remote Code Execution Vulnerability
SSV-17154 Journalness <= 4.1 (last_module) Remote Code Execution exploit
SSV-17153 Open-Realty <= 2.4.3 (last_module) Remote Code Execution Exploit
SSV-8030 Coppermine Photo Gallery 1.4.14 Remote Command Execution Exploit
SSV-8014 Smart Publisher 1.0.1 (disp.php) Remote Code Execution Vulnerability
SSV-7913 Comodo AntiVirus 2.0 ExecuteStr() Remote Command Execution Exploit
SSV-7906 SetCMS 3.6.5 (setcms.org) Remote Command Execution Exploit
SSV-7907 YaBB SE <= 1.5.5 Remote Command Execution Exploit
SSV-7875 AuraCMS 1.62 (stat.php) Remote Code Execution Exploit
SSV-7872 MyBulletinBoard (MyBB) <= 1.2.10 Remote Code Execution Exploit
SSV-7824 SAP MaxDB <= 7.6.03.07 pre-auth Remote Command Execution Exploit
SSV-7823 Microsoft VFP_OLE_Server ActiveX Remote Command Execution
SSV-7826 Docebo <= 3.5.0.3 (lib.regset.php) Command Execution Exploit
SSV-7825 McAfee E-Business Server Remote pre-auth Code Execution / DoS PoC
SSV-7813 TUTOS 1.3 (cmd.php) Remote Command Execution Vulnerability
SSV-7802 LoudBlog <= 0.6.1 (parsedpage) Remote Code Execution Vulnerability
SSV-7805 CuteNews 1.1.1 (html.php) Remote Code Execution Vulnerability
SSV-7757 XCMS <= 1.83 Remote Command Execution Exploit
SSV-7751 jPORTAL 2.3.1 & UserPatch (forum.php) Remote Code Execution Exploit
SSV-7745 xml2owl 0.1.1 showCode.php Remote Command Execution Vulnerability
SSV-7732 PMOS Help Desk <= 2.4 Remote Command Execution Exploit
SSV-7713 Mozilla Firefox 1.5 location.QueryInterface() Code Execution (osx)
SSV-7691 Shadowed Portal <= 5.7d3 Remote Command Execution Exploit
SSV-7649 RaidenHTTPD 2.0.19 (ulang) Remote Command Execution Exploit
SSV-7628 Anon Proxy Server 0.1000 Remote Command Execution Vulnerability
SSV-7590 HP Compaq Notebooks ActiveX Remote Code Execution Exploit
SSV-7591 SquirrelMail G/PGP Plugin deletekey() Command Injection Exploit
SSV-7543 Microsoft Excel Unspecified Remote Code Execution Exploit
SSV-7507 PBLang <= 4.99.17.q Remote File Rewriting / Command Execution
SSV-7496 KB-Bestellsystem (kb_whois.cgi) Command Execution Vulnerability
SSV-7494 VigileCMS <= 1.8 Stealth Remote Command Execution Exploit
SSV-7490 Ucms <= 1.8 Backdoor Remote Command Execution Exploit
SSV-7466 Microsoft Internet Explorer TIF/TIFF Code Execution (MS07-055)
SSV-7458 JBC Explorer <= 7.20 RC 1 Remote Code Execution Exploit
SSV-7444 Scribe <= 0.2 Remote PHP Code Execution Vulnerability
SSV-7432 Kodak Image Viewer TIF/TIFF Code Execution Exploit PoC (MS07-055)
SSV-7410 Flatnuke 3 Remote Command Execution / Privilege Escalation
SSV-7375 TikiWiki <= 1.9.8 tiki-graph_formula.php Command Execution Exploit
SSV-17090 LightBlog 8.4.1.1 Remote Code Execution Exploit
SSV-2263 Apple iPhone蓝牙任意代码执行漏洞
SSV-7302 CMS Made Simple 1.2 Remote Code Execution Vulnerability
SSV-7290 Microsoft Visual Studio 6.0 (PDWizard.ocx) Remote Command Execution
SSV-7287 Microsoft Visual Basic Enterprise Edition 6.0 SP6 Code Execution Exploit
SSV-7285 jetAudio 7.x ActiveX DownloadFromMusicStore() Code Execution Exploit
SSV-7277 Shop-Script FREE <= 2.0 Remote Command Execution Exploit
SSV-7258 Microsoft Visual Studio 6.0 (PDWizard.ocx) Remote Command Execution
京ICP备10040895号 京公网安备 11010502034610号 Copyright @ 404 Team from Knownsec. English