JVN/CVE Demo: Nvdinfos

NVD

Id: 85327
Name: CVE-2016-4898
Description: The datamover module in the Linux version of NovaBACKUP DataCenter before 09.06.03.0353 is vulnerable to remote command execution via unspecified attack vectors.
Reject
CVSS Version: 2
CVSS Score: 10
Severity: High
CVSS Base Score: 10
CVSS Impact Subscore: 10
CVSS Exploit Subscore: 10
CVSS Vector: (AV:N/AC:L/Au:N/C:C/I:C/A:C)
Pub Date: 2017-04-27
Published: 2017-04-13
Modified Date: 2017-04-19
Seq: 2016-4898

Actions

Related NVD References

Id	NVD Id	NVD No.	Reference	Actions
416238	85327	CVE-2016-9463	https://github.com/nextcloud/apps/commit/b85ace6840b8a6704641086bc3b8eb8e81cb2274	View
416239	85327	CVE-2016-9463	https://github.com/nextcloud/apps/commit/decb91fd31f4ffab191cbf09ce4e5c55c67a4087	View
416240	85327	CVE-2016-9463	https://github.com/owncloud/apps/commit/16cbccfc946c8711721fa684d78135ca1fb64791	View
416241	85327	CVE-2016-9463	https://github.com/owncloud/apps/commit/5d47e7b52646cf79edadd78ce10c754290cbb732	View
416242	85327	CVE-2016-9463	https://github.com/owncloud/apps/commit/a0e07b7ddd5a5fd850a6e07f8457d05b76a300b3	View
416243	85327	CVE-2016-9463	https://hackerone.com/reports/148151	View
416244	85327	CVE-2016-9463	https://nextcloud.com/security/advisory/?id=nc-sa-2016-006	View
416245	85327	CVE-2016-9463	https://owncloud.org/security/advisory/?id=oc-sa-2016-017	View
416246	85327	CVE-2016-9463	https://rhinosecuritylabs.com/2016/10/operation-ownedcloud-exploitation-post-exploitation-persistence/	View
416247	85327	CVE-2016-9463	https://github.com/nextcloud/apps/commit/b85ace6840b8a6704641086bc3b8eb8e81cb2274	View
416248	85327	CVE-2016-9463	https://github.com/nextcloud/apps/commit/decb91fd31f4ffab191cbf09ce4e5c55c67a4087	View
416249	85327	CVE-2016-9463	https://github.com/owncloud/apps/commit/16cbccfc946c8711721fa684d78135ca1fb64791	View
416250	85327	CVE-2016-9463	https://github.com/owncloud/apps/commit/5d47e7b52646cf79edadd78ce10c754290cbb732	View
416251	85327	CVE-2016-9463	https://github.com/owncloud/apps/commit/a0e07b7ddd5a5fd850a6e07f8457d05b76a300b3	View
416252	85327	CVE-2016-9463	https://hackerone.com/reports/148151	View
416253	85327	CVE-2016-9463	https://nextcloud.com/security/advisory/?id=nc-sa-2016-006	View
416254	85327	CVE-2016-9463	https://owncloud.org/security/advisory/?id=oc-sa-2016-017	View
416255	85327	CVE-2016-9463	https://rhinosecuritylabs.com/2016/10/operation-ownedcloud-exploitation-post-exploitation-persistence/	View
418600	85327	CVE-2017-3834	97422	View
418601	85327	CVE-2017-3834	https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-ame	View

Message	Memory use
Component initialization	1.39 MB
Controller action start	1.49 MB
Controller render start	2.29 MB
View render complete	10.93 MB

Message	Time in ms	Graph
Core Processing (Derived from $_SERVER["REQUEST_TIME"])	2.74
Event: Controller.initialize	0.02
Event: Controller.startup	0.06
Controller action	310.31
Event: Controller.beforeRender	4.54
» Processing toolbar data	4.45
Rendering View	373.17
» Event: View.beforeRender	0.02
» Rendering APP/View/Nvdinfos/view.ctp	360.97
» Event: View.afterRender	0.03
» Event: View.beforeLayout	0.02
» Rendering APP/View/Layouts/default.ctp	9.07
» » Rendering CORE/Cake/View/Elements/sql_dump.ctp	3.10
Event: View.afterLayout	0.00

Constant	Value
APP	/virtual/inogo77/public_html/jvn/app/
APP_DIR	app
APPLIBS	/virtual/inogo77/public_html/jvn/app/Lib/
CACHE	/virtual/inogo77/public_html/jvn/app/tmp/cache/
CAKE	/virtual/inogo77/public_html/jvn/lib/Cake/
CAKE_CORE_INCLUDE_PATH	/virtual/inogo77/public_html/jvn/lib
CORE_PATH	/virtual/inogo77/public_html/jvn/lib/
CAKE_VERSION	2.6.0
CSS	/virtual/inogo77/public_html/jvn/app/webroot/css/
CSS_URL	css/
DS	/
FULL_BASE_URL	http://inogo77.s500.xrea.com
IMAGES	/virtual/inogo77/public_html/jvn/app/webroot/img/
IMAGES_URL	img/
JS	/virtual/inogo77/public_html/jvn/app/webroot/js/
JS_URL	js/
LOGS	/virtual/inogo77/public_html/jvn/app/tmp/logs/
ROOT	/virtual/inogo77/public_html/jvn
TESTS	/virtual/inogo77/public_html/jvn/app/Test/
TMP	/virtual/inogo77/public_html/jvn/app/tmp/
VENDORS	/virtual/inogo77/public_html/jvn/vendors/
WEBROOT_DIR	webroot
WWW_ROOT	/virtual/inogo77/public_html/jvn/app/webroot/

Environment Variable	Value
Php Version	5.6.40
Phprc	php56.ini
Php Fcgi Children	1
Pwd	/virtual/inogo77/public_html/.fast-cgi-bin
Php Fcgi Max Requests	10000
Shlvl	0
Path	/usr/local/bin:/usr/bin:/bin
Http Connection	close
Script Name	/jvn/app/webroot/index.php
Request Uri	/jvn/nvdinfos/view/85327
Query String
Request Method	GET
Server Protocol	HTTP/1.1
Gateway Interface	CGI/1.1
Redirect Url	/jvn/app/webroot/nvdinfos/view/85327
Remote Port	43457
Script Filename	/virtual/inogo77/public_html/jvn/app/webroot/index.php
Server Admin	[no address given]
Context Document Root	/virtual/inogo77/public_html
Context Prefix
Request Scheme	http
Document Root	/virtual/inogo77/public_html
Remote Addr	3.145.116.193
Server Port	80
Server Addr	160.251.151.205
Server Name	inogo77.s500.xrea.com
Server Software	Apache
Server Signature
Http Host	inogo77.s500.xrea.com
Http Accept Encoding	gzip, br, zstd, deflate
Http Cookie	advanced-frontend=60cnn4s6h8fatgdv9lk56m7pf3
Http User Agent	Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
Http Accept	/
Gem Home	/usr/local/rvm/gems/ruby-2.3.0
X Dostranslated Ip	3.145.116.193
Mm Country Code	US
Mmdb Info	result found
Mmdb Addr	3.145.116.193
Unique Id	aCU2WvRoHmsg9-KesvVNmgAAAJQ
Redirect Status	200
Redirect Gem Home	/usr/local/rvm/gems/ruby-2.3.0
Redirect X Dostranslated Ip	3.145.116.193
Redirect Mm Country Code	US
Redirect Mmdb Info	result found
Redirect Mmdb Addr	3.145.116.193
Redirect Unique Id	aCU2WvRoHmsg9-KesvVNmgAAAJQ
Redirect Redirect Status	200
Redirect Redirect Gem Home	/usr/local/rvm/gems/ruby-2.3.0
Redirect Redirect X Dostranslated Ip	3.145.116.193
Redirect Redirect Mm Country Code	US
Redirect Redirect Mmdb Info	result found
Redirect Redirect Mmdb Addr	3.145.116.193
Redirect Redirect Unique Id	aCU2WvRoHmsg9-KesvVNmgAAAJQ
Fcgi Role	RESPONDER
Php Self	/jvn/app/webroot/index.php
Request Time Float	1747269210.6375
Request Time	1747269210

NVD

Actions

Related NVD References

Related JVN

Request History

Session

Request

Cake Params

Post data

Query string

Cookie

Current Route

Sql Logs

default

Memory

Timers

Logs

View Variables

App Constants

CakePHP Constants

PHP Environment

Included Files

Include Paths

Included Files