NVD

Id
38073  
Name
CVE-2013-1947  
Description
kelredd-pruview gem 0.3.8 for Ruby allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename argument to (1) document.rb, (2) video.rb, or (3) video_image.rb.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2013-04-25  
Modified Date
2013-05-01  
Seq
2013-1947  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
194613 38073 CVE-2013-1947 [oss-security] 20130410 Remote command injection in Ruby Gem kelredd-pruview 0.3.8  View
194614 38073 CVE-2013-1947 [oss-security] 20130412 Re: Remote command injection in Ruby Gem kelredd-pruview 0.3.8  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
20909 JVNDB-2013-002484 Ruby 用 kelredd-pruview gem における任意のコマンドを実行される脆弱性 Ruby 用 kelredd-pruview gem には、任意のコマンドを実行される脆弱性が存在します。 CVE-2013-1947 61889 CVE-2013-1947 38073 9.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-002484.html 2013-04-04 2013-04-30 View