Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
7.5
CVSSv2

CVE-2013-6041

Published: 27/12/2014 Updated: 07/11/2023
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

index.php in Softaculous Webuzo prior to 2.1.4 allows remote malicious users to execute arbitrary commands via shell metacharacters in a SOFTCookies sid cookie within a login action.

Vulnerable Product Search on Vulmon Subscribe to Product

softaculous webuzo

softaculous webuzo 2.1.1

softaculous webuzo 2.1.0

softaculous webuzo 2.1.2

Exploits

Exploit DB: Webuzo 2.1.3 - Multiple Vulnerabilities
# Exploit Title: Webuzo Multiple Vulnerabilities # Date: 7 October 2013 # Exploit Author: Mahendra # Vendor Homepage: wwwwebuzocom # Software Link: downloadswebuzocom/vaphp # Version: 213, other version might be vulnerable # Tested on: CentOS release 62 (FINAL) # CVE : CVE-2013-6041, CVE-2013-6042, CVE-2013-6043 ------------------- ...

References

CWE-78http://www.softaculous.com/board/index.php?tid=4526&title=Webuzo_2.1.4_Launchedhttps://web.archive.org/web/20140126212101/http://www.baesystemsdetica.com.au/Research/Advisories/Webuzo-Multiple-Vulnerabilities-%28DS-2013-007%29https://nvd.nist.govhttps://www.exploit-db.com/exploits/31982/
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-49223CVE-2024-0044information disclosureCVE-2024-35753HTML injectionCVE-2024-21306CVE-2024-35733SQL injectionCVE-2024-35732
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook