VulnerabilityModified
CVE-2012-1795
webglimpse.cgi in Webglimpse before 2.20.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the query parameter, as exploited in the wild in March 2012.
HIGH 7.5EPSS 4.17%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (4.17%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
webglimpse.cgi in Webglimpse before 2.20.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the query parameter, as exploited in the wild in March 2012.
- CVSS 2.0
- 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 4.17% probability · 90th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-78
- Affected
- webglimpse/webglimpse
- Source
- cve@mitre.org
References
- http://osvdb.org/80344
- http://secunia.com/advisories/48452
- http://www.kb.cert.org/vuls/id/364363Patch, US Government Resource
- http://www.securitytracker.com/id?1026825
- http://osvdb.org/80344
- http://secunia.com/advisories/48452
- http://www.kb.cert.org/vuls/id/364363Patch, US Government Resource
- http://www.securitytracker.com/id?1026825
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.