NVD

Id
11014  
Name
CVE-2011-4639  
Description
The (1) Traceroute and (2) Ping implementations in tools.php in SpamTitan WebTitan before 3.60 allow remote authenticated users to execute arbitrary commands via shell metacharacters in an argument, as demonstrated by an && (ampersand ampersand) sequence.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2012-10-08  
Modified Date
2012-10-08  
Seq
2011-4639  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
61484 11014 CVE-2011-4639 http://www.sec-1.com/blog/?p=211  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
29076 JVNDB-2012-004783 SpamTitan WebTitan の tools.php における任意のコマンドを実行される脆弱性 SpamTitan WebTitan の tools.php 内の (1) Traceroute および (2) Ping の実装には、任意のコマンドを実行される脆弱性が存在します。 CVE-2011-4639 52546 CVE-2011-4639 11014 6.5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-004783.html 2012-10-08 2012-10-10 View