Description (CNA)
Multiple CRLF injection vulnerabilities in callboth.php in AsteriDex 3.0 and earlier allow remote attackers to inject arbitrary shell commands via the (1) IN and (2) OUT parameters.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://www.exploit-db.com/exploits/4151
- http://osvdb.org/37846
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35270
- http://securityreason.com/securityalert/2863
- http://www.vupen.com/english/advisories/2007/2446
- http://bestof.nerdvittles.com/applications/asteridex/
- http://www.securityfocus.com/bid/24781
- http://www.securityfocus.com/archive/1/472907/100/0/threaded
- http://www.hoku.co.uk/advisories/asteridex.txt
- http://secunia.com/advisories/25965
ADP enrichment
No English description supplied.
- https://www.exploit-db.com/exploits/4151
- http://osvdb.org/37846
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35270
- http://securityreason.com/securityalert/2863
- http://www.vupen.com/english/advisories/2007/2446
- http://bestof.nerdvittles.com/applications/asteridex/
- http://www.securityfocus.com/bid/24781
- http://www.securityfocus.com/archive/1/472907/100/0/threaded
- http://www.hoku.co.uk/advisories/asteridex.txt
- http://secunia.com/advisories/25965