CVE

Id
35927  
CVE No.
CVE-2008-5810  
Status
Candidate  
Description
WBPublish (aka WBPublish.exe) in Fujitsu-Siemens WebTransactions 7.0, 7.1, and possibly other versions allows remote attackers to execute arbitrary commands via shell metacharacters in input that is sent through HTTP and improperly used during temporary session data cleanup, possibly related to (1) directory names, (2) template names, and (3) session IDs.  
Phase
Assigned (20090102)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
394755 35927 CVE-2008-5810 BUGTRAQ:20081219 SEC Consult SA-20081219-0 :: Fujitsu-Siemens WebTransactionsremote command injection vulnerability  View
394756 35927 CVE-2008-5810 URL:http://www.securityfocus.com/archive/1/archive/1/499417/100/0/threaded  View
394757 35927 CVE-2008-5810 MISC:http://www.sec-consult.com/files/20081219-0_fujitsu-siemens_webta_cmdexec.txt  View
394758 35927 CVE-2008-5810 CONFIRM:http://bs2www.fujitsu-siemens.de/update/securitypatch.htm#english  View
394759 35927 CVE-2008-5810 BID:32927  View
394760 35927 CVE-2008-5810 URL:http://www.securityfocus.com/bid/32927  View
394761 35927 CVE-2008-5810 VUPEN:ADV-2008-3462  View
394762 35927 CVE-2008-5810 URL:http://www.vupen.com/english/advisories/2008/3462  View
394763 35927 CVE-2008-5810 SECTRACK:1021475  View
394764 35927 CVE-2008-5810 URL:http://www.securitytracker.com/id?1021475  View
394765 35927 CVE-2008-5810 SECUNIA:33168  View
394766 35927 CVE-2008-5810 URL:http://secunia.com/advisories/33168  View
394767 35927 CVE-2008-5810 SREASON:4856  View
394768 35927 CVE-2008-5810 URL:http://securityreason.com/securityalert/4856  View
394769 35927 CVE-2008-5810 XF:webtransactions-wbpublish-command-injection(47495)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
45688 JVNDB-2008-000084 PHP におけるクロスサイトスクリプティングの脆弱性 PHP には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2008-5814 35927 2.6 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000084.html  View