Security Advisory

CVE-2013-7418

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2015-01-02 22:00:00
Last updated 2024-09-16 22:57:01
Assigner mitre
State PUBLISHED

Description

cgi-bin/iptablesgui.cgi in IPCop (aka IPCop Firewall) before 2.1.5 allows remote authenticated users to execute arbitrary code via shell metacharacters in the TABLE parameter. NOTE: this can be exploited remotely by leveraging a separate cross-site scripting (XSS) vulnerability.