Vulnerability Category — Code Execution

Chinese name:
代码执行
Detail：
代码执行漏洞是用户通过浏览器提交执行命令，由于服务器端没有针对执行函数做过滤，导致在没有指定绝对路径的情况下就执行命令，可能会允许攻击者通过改变 $PATH 或程序执行环境的其他方面来执行一个恶意构造的代码。

Related Vulnerabilities

SSV ID Name
SSV-15923 KnowledgebasePublisher 1.2 (include) Remote Code Execution Exploit
SSV-15919 Simple PHP Blog <= 0.4.7.1 Remote Command Execution Exploit
SSV-15914 GuestBook Script <= 1.7 (include_files) Remote Code Execution Exploit
SSV-15911 Dropbear / OpenSSH Server (MAX_UNAUTH_CLIENTS) Denial of Service
SSV-15912 Guppy <= 4.5.11 (Delete Databases) Remote Denial of Service Exploit
SSV-15910 JiRos Banner Experience 1.0 (Create Admin Bypass) Remote Exploit
SSV-15909 Light Weight Calendar 1.x (date) Remote Code Execution Vulnerability
SSV-15904 Limbo CMS <= 1.0.4.2 (ItemID) Remote Code Execution Exploit (meta)
SSV-15896 LibTiff 3.7.1 (BitsPerSample Tag) Local Buffer Overflow Exploit
SSV-15895 Fantastic News <= 2.1.2 (script_path) Remote Code Execution Exploit
SSV-15888 phpRPC Library <= 0.7 XML Data Decoding Remote Code Execution (2)
SSV-15884 Limbo CMS <= 1.0.4.2 (ItemID) Remote Code Execution Exploit
SSV-15885 phpRPC Library <= 0.7 XML Data Decoding Remote Code Execution
SSV-15879 4Images <= 1.7.1 (Local Inclusion) Remote Code Execution Exploit
SSV-15873 iGENUS WebMail <= 2.0.2 (config_inc.php) Remote Code Execution Exploit
SSV-15868 NOCC Webmail <= 1.0 (Local Inclusion) Remote Code Execution Exploit
SSV-15867 Noahs Classifieds <= 1.3 (lowerTemplate) Remote Code Execution
SSV-15860 Admbook <= 1.2.2 (X-Forwarded-For) Remote Command Execution Exploit
SSV-15858 Gravity Board X <= 1.1 (csscontent) Remote Code Execution Exploit
SSV-15859 Coppermine Photo Gallery <= 1.4.3 Remote Commands Execution Exploit
SSV-15797 PHPGedView <= 3.3.7 Arbitrary Remote Code Execution Exploit
SSV-13620 Watchfire AppScan QA 5.0.x Remote Code Execution Exploit PoC
SSV-15791 phpCOIN 1.2.2 (phpcoinsessid) SQL Inj / Remote Code Execution Exploit
SSV-15787 SugarSuite Open Source <= 4.0beta Remote Code Execution Exploit (c)
SSV-15786 Website Baker <= 2.6.0 Login Bypass / Remote Code Execution Exploit
SSV-15782 SugarSuite Open Source <= 4.0beta Remote Code Execution Exploit
SSV-15710 w-Agora <= 4.2.0 (quicklist.php) Remote Code Execution Exploit
SSV-15683 AzDGDatingLite <= 2.1.3 Remote Code Execution Exploit
SSV-15677 Class-1 Forum <= 0.24.4 Remote Code Execution Exploit
SSV-15654 Wordpress <= 1.5.1.3 Remote Code Execution eXploit (metasploit)
SSV-15652 Wordpress <= 1.5.1.3 Remote Code Execution 0-Day Exploit
SSV-15651 Flatnuke <= 2.5.5 Remote Code Execution
SSV-13656 Intruder Client 1.00 Remote Command Execution & DoS Exploit
SSV-13682 MS Exchange Server Remote Code Execution Exploit (MS05-021)
SSV-15406 phpBB v1.0.0 - 2.0.10 admin_cash.php remote exploit
SSV-13752 Icecast <= 2.0.1 Win32 Remote Code Execution Exploit
SSV-13765 Winamp <= 5.04 Skin File (.wsz) Remote Code Execution Exploit
SSV-13831 Snitz Forums 3.3.03 Remote Command Execution Exploit
京ICP备10040895号 京公网安备 11010502034610号 Copyright @ 404 Team from Knownsec. 简体中文