漏洞分类 — 代码执行

英文名字
Code Execution
漏洞详情：
代码执行漏洞是用户通过浏览器提交执行命令，由于服务器端没有针对执行函数做过滤，导致在没有指定绝对路径的情况下就执行命令，可能会允许攻击者通过改变 $PATH 或程序执行环境的其他方面来执行一个恶意构造的代码。

相关漏洞

SSV ID 漏洞名称
SSV-2147 联想Automated Solutions ActiveX控件多个安全漏洞
SSV-7133 Microsoft DXMedia SDK 6 (SourceUrl) ActiveX Remote Code Execution
SSV-7132 Php Blue Dragon CMS 3.0.0 Remote Code Execution Exploit
SSV-7097 VMware Inc 6.0.0 CreateProcess Remote Code Execution Exploit
SSV-7088 mlsrvx.dll 1.8.9.1 ArGoSoft Mail Server Data Write/Remote Code Execution
SSV-7090 Entertainment CMS (Local Inclusion) Remote Command Execution Exploit
SSV-7075 Joomla! CMS 1.5 beta 2 (search) Remote Code Execution Vulnerability
SSV-17053 Joomla! CMS 1.5 beta 2 (search) Remote Code Execution Vulnerability
SSV-7054 Flash Player/Plugin Video file parsing Remote Code Execution POC
SSV-7040 SquirrelMail G/PGP Encryption Plug-in 2.0 Command Execution Vuln
SSV-7013 Pluxml 0.3.1 Remote Code Execution Exploit
SSV-17044 AsteriDex <= 3.0 Remote (callboth.php) Remote Code Execution Exploit
SSV-7007 MyCMS <= 0.9.8 Remote Command Execution Exploit (2 method)
SSV-7008 MyCMS <= 0.9.8 Remote Command Execution Exploit
SSV-6958 BitchX 1.1-final (EXEC) Remote Command Execution Exploit
SSV-17037 Jasmine CMS 1.0 SQL Injection/Remote Code Execution Exploit
SSV-6937 Safari 3 for Windows Beta Remote Command Execution PoC
SSV-6932 Link Request Contact Form 3.4 Remote Code Execution Vulnerability
SSV-17034 e-Vision CMS <= 2.02 SQL Injection/Remote Code Execution Exploit
SSV-17032 PBLang <= 4.67.16.a Remote Code Execution Exploit
SSV-17031 Sendcard <= 3.4.1 (Local File Inclusion) Remote Code Execution Exploit
SSV-17030 Quick.Cart <= 2.2 RFI/LFI Remote Code Execution Exploit
SSV-17028 Pheap 2.0 Admin Bypass / Remote Code Execution Exploit
SSV-17027 Inout Search Engine (all version) Remote Code Execution Exploit
SSV-17024 Vistered Little 1.6a (skin) Remote File Disclosure Vulnerability
SSV-17025 WAnewsletter <= 2.1.3 Remote File Inclusion Vulnerability
SSV-17023 Fundanemt <= 2.2.0 (spellcheck.php) Remote Code Execution Exploit
SSV-17019 gCards <= 1.46 SQL Injection/Remote Code Execution Exploit
SSV-6854 NavBoard 2.6.0 Remote Code Execution Exploit
SSV-17016 AlstraSoft Template Seller Pro <= 3.25 Remote Code Execution Exploit
SSV-6794 Monalbum 0.8.7 Remote Code Execution Exploit
SSV-6761 Nuked-klaN 1.7.6 Remote Code Execution Exploit
SSV-6751 Net Portal Dynamic System (NPDS) 5.10 Remote Code Execution (2)
SSV-6724 Winamp <= 5.34 .MP4 File Code Execution Exploit
SSV-17000 Net Portal Dynamic System (NPDS) <= 5.10 Remote Code Execution (2)
SSV-6737 YaPIG 0.95b Remote Code Execution Exploit
SSV-6678 Maran PHP Forum (forum_write.php) Remote Code Execution Vulnerability
SSV-6662 Mozzers SubSystem final (subs.php) Remote Code Execution Vulnerability
SSV-6663 AimStats 3.2 (process.php update) Remote Code Execution Exploit
SSV-6657 MiniGal b13 (image backdoor) Remote Code Execution Exploit
SSV-6636 VCDGear <= 3.56 Build 050213 (FILE) Local Code Execution Exploit
SSV-6638 PunBB 1.2.14 Remote Code Execution Exploit
SSV-6617 LS simple guestbook (v1) Remote Code Execution Vulnerability
SSV-6624 Chatness 2.5.3 (options.php/save.php) Remote Code Execution Exploit
SSV-16988 Chatness <= 2.5.3 (options.php/save.php) Remote Code Execution Exploit
SSV-16979 PunBB <= 1.2.14 Remote Code Execution Exploit
SSV-16968 HIOX GUEST BOOK (HGB) 4.0 Remote Code Execution Vulnerability
SSV-6595 AOL SuperBuddy ActiveX Control Remote Code Execution Exploit (meta)
SSV-6578 MyBulletinBoard (MyBB) <= 1.2.3 Remote Code Execution Exploit
SSV-6559 JC URLshrink 1.3.1 Remote Code Execution Vulnerability
SSV-16935 IceBB 1.0-rc5 Remote Code Execution Exploit
SSV-16936 C-Arbre <= 0.6PR7 (root_path) Remote File Inclusion Vulnerability
SSV-16933 PBlang 4.66z Remote Code Execution Exploit
SSV-6414 Net Portal Dynamic System (NPDS) <= 5.10 Remote Code Execution
SSV-16906 Dayfox Blog 4 (postpost.php) Remote Code Execution Vulnerability
SSV-6330 PHP < 4.4.5 / 5.2.1 (shmop Functions) Local Code Execution Exploit
SSV-6316 Flat Chat 2.0 (include online.txt) Remote Code Execution Vulnerability
SSV-6290 webSPELL <= 4.01.02 Remote PHP Code Execution Exploit
SSV-6197 Drupal < 5.1 (post comments) Remote Command Execution Exploit v2
SSV-6198 Drupal < 4.7.6 (post comments) Remote Command Execution Exploit v2
SSV-6187 Advanced Poll <= 2.0.5-dev Remote Code Execution Exploit
SSV-16846 Advanced Poll &lt;= 2.0.5-dev Remote Code Execution Exploit
SSV-6178 GGCMS &lt;= v1.1.0 RC1 Remote Auto Deface Exploit / Remote Code Execution Exploit
SSV-6177 KGB &lt;= 1.9 Remote Code Execution Exploit
SSV-6150 Alibaba Alipay (Remove ActiveX) Remote Code Execution Exploit
SSV-6146 Microsoft Word 2000 Unspecified Code Execution Exploit (0day)
SSV-6140 GGCMS &lt;= 1.1.0 RC1 Remote Code Execution Exploit
SSV-6124 Microsoft Word 2000 Unspecified Code Execution Exploit (0day)
SSV-6119 F3Site &lt;= 2.1 Remote Code Execution Exploit
SSV-6086 GuppY &lt;= 4.5.16 Remote Commands Execution Exploit
SSV-6052 Vote-Pro 4.0 (poll_frame.php poll_id) Remote Code Execution Exploit
SSV-5992 sNews &lt;= 1.5.30 Remote Reset Admin Pass / Command Exec Exploit
SSV-5973 @lex Guestbook &lt;= 4.0.2 Remote Command Execution Exploit
SSV-1088 WinZip FileView ActiveX控件CreateNewFolderFromName方法缓冲区溢出漏洞
SSV-5934 MDForum &lt;= 2.0.1 (PNSVlang) Remote Code Execution Exploit
SSV-5936 WebText &lt;= 0.4.5.2 Remote Code Execution Exploit
SSV-5900 PHP-Update &lt;= 2.7 (admin/uploads.php) Remote Code Execution Exploit
SSV-5882 logahead UNU edition 1.0 Remote Upload File / Code Execution Vuln
SSV-5878 Ultimate PHP Board &lt;= 2.0b1 (chat/login.php) Code Execution Exploit
SSV-998 Intel 2200BG W29N51.SYS驱动信标帧远程执行代码漏洞
SSV-5851 Oracle &lt;= 9i / 10g (extproc) Local/Remote Command Execution Exploit
SSV-5833 extreme-fusion &lt;= 4.02 Remote Code Execution Exploit
SSV-16784 Bandwebsite &lt;= 1.5 (Login) Remote Add Admin Exploit
SSV-16785 mxBB Module Meeting &lt;= 1.1.2 Remote FileInclusion Vulnerability
SSV-5823 MS Internet Explorer 7 (DLL-load hijacking) Code Execution Exploit PoC
SSV-5819 phpAlbum &lt;= v0.4.1 Beta6 Remote Code Execution Exploit
SSV-5818 Microsoft Word Document Code Execution Proof of Concept
SSV-5807 TorrentFlux 2.2 Command Execution Exploit
SSV-5808 TorrentFlux 2.2 Database Credentials Exposure Exploit
SSV-5793 MamboServerCache_library远程任意命令执行漏洞 Exploit
SSV-5781 phpBBHTTP应答分割攻击及跨站脚本执行漏洞 Exploit
SSV-5782 phpBB多个跨站脚本执行漏洞 Exploit
SSV-5773 GoScript远程任意命令执行漏洞 Exploit
SSV-5774 FlatNuke用户数据任意PHP代码执行漏洞 Exploit
SSV-5733 XMB &lt;= 1.9.6 Final basename() Remote Command Execution Exploit
SSV-5730 SAPID CMS &lt;= 1.2.3_rc3 (rootpath) Remote Code Execution Exploit
SSV-5674 TWiki &lt;= 4.0.4 (configure) Remote Command Execution Exploit
SSV-5683 RoarSmithinfo2www远程执行任意命令漏洞 Exploit
SSV-5682 AnyForm脚本远程可执行任意命令漏洞 Exploit
SSV-5667 Envolution &lt;= 1.1.0 (PNSVlang) Remote Code Execution Exploit
京ICP备10040895号 京公网安备 11010502034610号 Copyright @ 404 Team from Knownsec. English