A command injection vulnerability exists in TeemIp versions before 2.4.0. The new_config parameter of exec.php allows one to create a new PHP file with the exception of config information. The malicious PHP code sent is executed instantaneously and is not saved on the server.
References
| Link | Resource |
|---|---|
| https://pentest.com.tr/exploits/TeemIp-IPAM-2-4-0-new-config-Command-Injection-Metasploit.html | Exploit Patch Third Party Advisory |
| https://www.exploit-db.com/exploits/46641 | Exploit Patch Third Party Advisory VDB Entry |
| https://www.exploit-db.com/exploits/46641/ | Exploit Third Party Advisory VDB Entry |
| https://pentest.com.tr/exploits/TeemIp-IPAM-2-4-0-new-config-Command-Injection-Metasploit.html | Exploit Patch Third Party Advisory |
| https://www.exploit-db.com/exploits/46641 | Exploit Patch Third Party Advisory VDB Entry |
| https://www.exploit-db.com/exploits/46641/ | Exploit Third Party Advisory VDB Entry |
Configurations
History
21 Nov 2024, 04:19
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://pentest.com.tr/exploits/TeemIp-IPAM-2-4-0-new-config-Command-Injection-Metasploit.html - Exploit, Patch, Third Party Advisory | |
| References | () https://www.exploit-db.com/exploits/46641 - Exploit, Patch, Third Party Advisory, VDB Entry | |
| References | () https://www.exploit-db.com/exploits/46641/ - Exploit, Third Party Advisory, VDB Entry |
Information
Published : 2019-04-04 18:29
Updated : 2024-11-21 04:19
NVD link : CVE-2019-10863
Mitre link : CVE-2019-10863
CVE.ORG link : CVE-2019-10863
JSON object : View
Products Affected
combodo
- teemip
CWE
CWE-94
Improper Control of Generation of Code ('Code Injection')