critical10.0Public exploit code
CVE-2013-5912
VhttpdMgr in Thomson Reuters Velocity Analytics Vhayu Analytic Server 6.94 build 2995 allows remote attackers to execute arbitrary code via a URL in the fileNa…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Thomson Reuters Velocity Analytics - Remote Code Injection2013-11-22 · remote · hardware · Verified
Impact
VhttpdMgr in Thomson Reuters Velocity Analytics Vhayu Analytic Server 6.94 build 2995 allows remote attackers to execute arbitrary code via a URL in the fileName parameter during an importFile action.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Thomsonreuters | Velocity Analytics Vhayu Analytic Server | Version 6.94 |