Beveiligingsadvies

CVE-2013-10039

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-07-31 14:55:54
Laatst bijgewerkt 2026-05-15 11:14:08
Toegewezen door VulnCheck
CVSS-score 8.7
Status PUBLISHED

Beschrijving

A command injection vulnerability exists in GestioIP 3.0 commit ac67be and earlier in ip_checkhost.cgi. Crafted input to the 'ip' parameter allows attackers to execute arbitrary shell commands on the server via embedded base64-encoded payloads. Authentication may be required depending on deployment configuration.