NVD

Id
39392  
Name
CVE-2013-3631  
Description
NAS4Free 9.1.0.1.804 and earlier allows remote authenticated users to execute arbitrary PHP code via a request to exec.php, aka the "Advanced | Execute Command" feature. NOTE: this issue might not be a vulnerability, since it appears to be part of legitimate, intentionally-exposed functionality by the developer and is allowed within the intended security policy.  
Reject
 
CVSS Version
2  
CVSS Score
6  
Severity
Medium  
CVSS Base Score
6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2013-11-02  
Modified Date
2013-11-05  
Seq
2013-3631  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
200897 39392 CVE-2013-3631 VU#326830  View
200898 39392 CVE-2013-3631 https://community.rapid7.com/community/metasploit/blog/2013/10/30/seven-tricks-and-treats  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
23384 JVNDB-2013-004959 NAS4Free にコードインジェクションの脆弱性 NAS4Free には、コードインジェクション (CWE-94) の脆弱性が存在します。 CVE-2013-3631 63573 CVE-2013-3631 39392 6 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-004959.html 2013-10-30 2013-11-06 View