CyberSec.Space Logo
CVEブラウザに戻る

CVE-2015-2845

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.0280%
EPSS Percentile32.70th
Published2015年5月12日
Last Modified2026年5月6日

Vulnerability Description

The cpanel function in go_site.php in GoAutoDial GoAdmin CE before 3.3-1421902800 allows remote attackers to execute arbitrary commands via the $type portion of the PATH_INFO.

Affected Platforms (CPE)

📦
Goautodial

Goadmin Ce

= 3.0
📦
Goautodial

Goadmin Ce

= 3.3

References & Advisories

🔗 http://goautodial.org/news/21
🔗 http://packetstormsecurity.com/files/131543/GoAutoDial-SQL-Injection-Command-Execution-File-Upload.html
🔗 http://www.securityfocus.com/archive/1/535319/100/1100/threaded
🔗 http://www.securityfocus.com/bid/74281
🔗 https://www.exploit-db.com/exploits/36807/
🔗 https://www.exploit-db.com/exploits/42296/
🔗 http://goautodial.org/news/21
🔗 http://packetstormsecurity.com/files/131543/GoAutoDial-SQL-Injection-Command-Execution-File-Upload.html

関連する脆弱性情報

CVE-2015-284210.0

Unrestricted file upload vulnerability in go_audiostore.php in the audiostore (Voice Files) upload functionality in GoAutoDial GoA...

CVE-2015-284410.0

The cpanel function in go_site.php in GoAutoDial GoAdmin CE before 3.3-1420434000 allows remote attackers to execute arbitrary com...

CVE-2015-28437.5

Multiple SQL injection vulnerabilities in GoAutoDial GoAdmin CE before 3.3-1421902800 allow remote attackers to execute arbitrary ...

CVE-2026-121917.8

A vulnerability was found in Comma AI Openpilot 0.11. This issue affects the function pickle.load/pickle.loads of the file selfdri...