CVEブラウザに戻る

CVE-2006-7012

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0520%

EPSS Percentile1.74th

Published2007年2月15日

Last Modified2026年4月23日

Vulnerability Description

scart.cgi in SCart 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the page parameter of a show_text action.

Affected Platforms (CPE)

📦

Scart

Scart

= 2.0

References & Advisories

🔗 http://advisories.echo.or.id/adv/adv32-K-159-2006.txt

🔗 http://securityreason.com/securityalert/2257

🔗 http://www.securityfocus.com/archive/1/435861/30/4710/threaded

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/26921

🔗 https://www.exploit-db.com/exploits/1876

🔗 http://advisories.echo.or.id/adv/adv32-K-159-2006.txt

🔗 http://securityreason.com/securityalert/2257

🔗 http://www.securityfocus.com/archive/1/435861/30/4710/threaded

関連する脆弱性情報

CVE-2006-28147.5

Multiple buffer overflows in the (1) vGetPost and (2) main functions in easy-scart.c through easy-scart6.c in iShopCart allow remo...

CVE-2006-100010.0

Multiple SQL injection vulnerabilities in Pentacle In-Out Board 3.0 and earlier allow remote attackers to execute arbitrary SQL co...

CVE-2006-097910.0

Unspecified vulnerability in the local weblog publisher in Nidelven IT Issue Dealer before 0.9.96 has unknown impact and attack ve...

CVE-2006-100210.0

NETGEAR WGT624 Wireless DSL router has a default account of super_username "Gearguy" and super_passwd "Geardog", which allows remo...