返回 CVE 瀏覽器

CVE-2006-7012

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0520%

EPSS Percentile1.74th

Published2007年2月15日

Last Modified2026年4月23日

Vulnerability Description

scart.cgi in SCart 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the page parameter of a show_text action.

Affected Platforms (CPE)

📦

Scart

Scart

= 2.0

References & Advisories

🔗 http://advisories.echo.or.id/adv/adv32-K-159-2006.txt

🔗 http://securityreason.com/securityalert/2257

🔗 http://www.securityfocus.com/archive/1/435861/30/4710/threaded

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/26921

🔗 https://www.exploit-db.com/exploits/1876

🔗 http://advisories.echo.or.id/adv/adv32-K-159-2006.txt

🔗 http://securityreason.com/securityalert/2257

🔗 http://www.securityfocus.com/archive/1/435861/30/4710/threaded

相關漏洞威脅

CVE-2006-28147.5

Multiple buffer overflows in the (1) vGetPost and (2) main functions in easy-scart.c through easy-scart6.c in iShopCart allow remo...

CVE-2006-012810.0

Buffer overflow in the IMAP service of Rockliffe MailSite before 6.1.22.1 allows remote attackers to have an unknown impact via un...

CVE-2006-011910.0

Multiple unspecified vulnerabilities in IBM Lotus Notes and Domino Server before 6.5.5 have unknown impact and attack vectors, due...

CVE-2006-021810.0

Multiple unspecified vulnerabilities in MyBulletinBoard (MyBB) before 1.0.2 have unspecified impact and attack vectors, related to...