high7.5Public exploit code
CVE-2013-6041
index.php in Softaculous Webuzo before 2.1.4 allows remote attackers to execute arbitrary commands via shell metacharacters in a SOFTCookies sid cookie within …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Webuzo 2.1.3 - Multiple Vulnerabilities2014-02-28 · webapps · php
Impact
index.php in Softaculous Webuzo before 2.1.4 allows remote attackers to execute arbitrary commands via shell metacharacters in a SOFTCookies sid cookie within a login action.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Softaculous | Webuzo | through 2.1.3 Versions 2.1.0, 2.1.1, 2.1.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.softaculous.com/board/index.php?tid=4526&title=Webuzo_2.1.4_Launched
- https://web.archive.org/web/20140126212101/http://www.baesystemsdetica.com.au/Research/Advisories/Webuzo-Multiple-Vulnerabilities-%28DS-2013-007%29
- http://www.softaculous.com/board/index.php?tid=4526&title=Webuzo_2.1.4_Launched
- https://web.archive.org/web/20140126212101/http://www.baesystemsdetica.com.au/Research/Advisories/Webuzo-Multiple-Vulnerabilities-%28DS-2013-007%29