10
CVSSv2

CVE-2009-4025

Published: 29/11/2009 Updated: 17/08/2017
CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10
VMScore: 890
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

Argument injection vulnerability in the traceroute function in Traceroute.php in the Net_Traceroute package prior to 0.21.2 for PEAR allows remote malicious users to execute arbitrary shell commands via the host parameter. NOTE: some of these details are obtained from third party information.

Vulnerable Product Search on Vulmon Subscribe to Product

pear pear 0.21

pear pear

pear pear 0.20

pear pear 0.11