CVE-2010-4099 | BDVDB-2026-43845 Detail

Description#

ess.pm in NitroSecurity NitroView ESM 8.4.0a, when ESSPMDebug is enabled, allows remote attackers to execute arbitrary commands via shell metacharacters in the Request parameter to ess.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://exchange.xforce.ibmcloud.com/vulnerabilities/62768
http://www.exploit-db.com/exploits/15318
http://www.securitytracker.com/id?1024639
http://www.securityfocus.com/bid/44421

Exploit#

http://www.exploit-db.com/exploits/15318

History#

Version 12010-10-27Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.