high8.8Public exploit code
CVE-2014-5287
A Bash script injection vulnerability exists in Kemp Load Master 7.1-16 and earlier due to a failure to sanitize input in the Web User Interface (WUI).
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Kemp Load Master 7.1.16 - Multiple Vulnerabilities2015-04-02 · webapps · multiple
Impact
A Bash script injection vulnerability exists in Kemp Load Master 7.1-16 and earlier due to a failure to sanitize input in the Web User Interface (WUI).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Progress | Loadmaster | through 7.1-16 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/131284/Kemp-Load-Master-7.1-16-CSRF-XSS-DoS-Code-Execution.html
- https://www.exploit-db.com/exploits/36609/
- https://www.fxc.jp/news/Product_Overview-LoadMaster_Release_Notes.pdf
- http://packetstormsecurity.com/files/131284/Kemp-Load-Master-7.1-16-CSRF-XSS-DoS-Code-Execution.html
- https://www.exploit-db.com/exploits/36609/
- https://www.fxc.jp/news/Product_Overview-LoadMaster_Release_Notes.pdf