Vulnerability Details CVE-2015-2208
The saveObject function in moadmin.php in phpMoAdmin 1.1.2 allows remote attackers to execute arbitrary commands via shell metacharacters in the object parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.883
EPSS Ranking 99.5%
CVSS Severity
CVSS v2 Score 7.5
References
- http://packetstormsecurity.com/files/130685/PHPMoAdmin-1.1.2-Remote-Code-Execution.html
- http://seclists.org/fulldisclosure/2015/Mar/19
- http://www.exploit-db.com/exploits/36251
- http://www.openwall.com/lists/oss-security/2015/03/04/4
- http://www.openwall.com/lists/oss-security/2015/03/04/5
- http://packetstormsecurity.com/files/130685/PHPMoAdmin-1.1.2-Remote-Code-Execution.html
- http://seclists.org/fulldisclosure/2015/Mar/19
- http://www.exploit-db.com/exploits/36251
- http://www.openwall.com/lists/oss-security/2015/03/04/4
- http://www.openwall.com/lists/oss-security/2015/03/04/5
Products affected by CVE-2015-2208
-
cpe:2.3:a:avinu:phpmoadmin:1.1.2