CVE

Id
59106  
CVE No.
CVE-2012-5863  
Status
Candidate  
Description
ping.php on the Sinapsi eSolar Light Photovoltaic System Monitor (aka Schneider Electric Ezylog photovoltaic SCADA management server), Sinapsi eSolar, and Sinapsi eSolar DUO with firmware before 2.0.2870_2.2.12 allows remote attackers to execute arbitrary commands via shell metacharacters in the ip_dominio parameter.  
Phase
Assigned (20121114)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
603494 59106 CVE-2012-5863 BUGTRAQ:20120911 Multiple vulnerabilities in Ezylog photovoltaic management server  View
603495 59106 CVE-2012-5863 URL:http://archives.neohapsis.com/archives/bugtraq/2012-09/0045.html  View
603496 59106 CVE-2012-5863 EXPLOIT-DB:21273  View
603497 59106 CVE-2012-5863 URL:http://www.exploit-db.com/exploits/21273/  View
603498 59106 CVE-2012-5863 MISC:http://www.us-cert.gov/control_systems/pdf/ICSA-12-325-01.pdf  View
603499 59106 CVE-2012-5863 CONFIRM:http://www.sinapsitech.it/default.asp?active_page_id=78&news_id=88  View
603500 59106 CVE-2012-5863 XF:sinapsi-ping-command-exec(80202)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
30103 JVNDB-2012-005810 WordPress における有効なセッション識別子を取得される脆弱性 WordPress は、管理者がログアウトする際に、wordpress_sec セッション cookie を無効にしないため、有効なセッション識別子を取得される、またはデータを改ざんされる脆弱性が存在します。 CVE-2012-5868 59106 2.6 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005810.html  View