Vulnerabilities > CVE-2008-4873 - Remote Command Execution vulnerability in Sepal Spboard 4.5

047910
CVSS 10.0 - CRITICAL
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
network
low complexity
sepal
critical
exploit available
NVD
Published: 2008-11-01
Updated: 2017-09-29

Summary

board.cgi in Sepal SPBOARD 4.5 allows remote attackers to execute arbitrary commands via shell metacharacters in the file parameter during a down_file action.

Vulnerable Configurations

Part Description Count
Application
Sepal
1

Exploit-Db

descriptionSepal SPBOARD 4.5 (board.cgi) Remote Command Exec Vulnerability. CVE-2008-4873. Webapps exploit for cgi platform
fileexploits/cgi/webapps/6864.txt
idEDB-ID:6864
last seen2016-02-01
modified2008-10-29
platformcgi
port
published2008-10-29
reporterGoLd_M
sourcehttps://www.exploit-db.com/download/6864/
titleSepal SPBOARD 4.5 board.cgi Remote Command Exec Vulnerability
typewebapps

References