ID de Prueba:	1.3.6.1.4.1.25623.1.0.20014
Categoría:	Web application abuses
Título:	WebGUI < 6.7.6 arbitrary command execution
Resumen:	The installed version of WebGUI on the remote host fails to sanitize; user-supplied input via the 'class' variable to various sources before using it to run commands.
Descripción:	Summary: The installed version of WebGUI on the remote host fails to sanitize user-supplied input via the 'class' variable to various sources before using it to run commands. Vulnerability Impact: By leveraging this flaw, an attacker may be able to execute arbitrary commands on the remote host within the context of the affected web server userid. Solution: Upgrade to WebGUI 6.7.6 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2005-4694 BugTraq ID: 15083 http://www.securityfocus.com/bid/15083 http://www.osvdb.org/19933 http://secunia.com/advisories/17158 http://www.vupen.com/english/advisories/2005/2060 XForce ISS Database: webgui-unknown-code-execution(22730) https://exchange.xforce.ibmcloud.com/vulnerabilities/22730
Copyright	Copyright (C) 2005 David Maciejak

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.