Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 28/11/2014 Updated: 17/12/2014

CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6

VMScore: 935

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Enalean Tuleap prior to 7.5.99.6 allows remote malicious users to execute arbitrary commands via the User-Agent header, which is provided to the passthru PHP function.

Vulnerable Product	Search on Vulmon	Subscribe to Product
enalean tuleap

Vulnerability title: Tuleap <= 74995 Remote Command Execution in Enalean Tuleap CVE: CVE-2014-7178 Vendor: Enalean Product: Tuleap Affected version: 74995 and earlier Fixed version: 75 Reported by: Jerzy Kramarz Details: Tuleap does not validate the syntax of the requests submitted to SVN handler pages in order to validate weather reque ...

Enalean Tuleap versions 74995 and below suffer from a remote command execution vulnerability ...

CWE-20 http://seclists.org/fulldisclosure/2014/Oct/121 https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-7178/https://www.tuleap.org/recent-vulnerabilities https://nvd.nist.gov https://www.exploit-db.com/exploits/35100/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2014-7178

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect