CVE-2012-1795

webglimpse.cgi in Webglimpse before 2.20.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the query parameter,...

Basic Information

CVE State
PUBLISHED
Reserved Date
March 20, 2012
Published Date
March 20, 2012
Last Updated
August 06, 2024
Vendor
Webglimpse
Product
Webglimpse
Description
webglimpse.cgi in Webglimpse before 2.20.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the query parameter, as exploited in the wild in March 2012.

CVSS Scores

CVSS v2.0

7.5

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploit Status

Exploited in the Wild
Yes (2012-03-20 18:00:00 UTC) Source

Known Exploited Vulnerability Information

Source Added Date
CVE 2012-03-20 18:00:00 UTC

Timeline

  • CVE ID Reserved

  • CVE Published to Public

  • Added to KEVIntel