Vulnerabilities > Ipcop > Ipcop > 2.1.2

DATE CVE VULNERABILITY TITLE RISK
2015-01-02 CVE-2013-7418 Command Injection vulnerability in Ipcop 2.1.2/2.1.4
cgi-bin/iptablesgui.cgi in IPCop (aka IPCop Firewall) before 2.1.5 allows remote authenticated users to execute arbitrary code via shell metacharacters in the TABLE parameter.
network
low complexity
ipcop CWE-77
6.5
2015-01-02 CVE-2013-7417 Cross-site Scripting vulnerability in Ipcop 2.1.2
Cross-site scripting (XSS) vulnerability in cgi-bin/ipinfo.cgi in IPCop (aka IPCop Firewall) before 2.1.3 allows remote attackers to inject arbitrary web script or HTML via the QUERY_STRING.
network
ipcop CWE-79
4.3