CVE-2013-6041

index.php in Softaculous Webuzo before 2.1.4 allows remote attackers to execute arbitrary commands via shell metacharacters in a SOFTCookies sid cookie within a login action.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2014-12-27

Last modified

2024-08-06

Weaknesses

CWE-78

Affected products

• Webuzo (Softaculous)

References

• http://www.softaculous.com/board/index.php?tid=4526&title=Webuzo_2.1.4_Launched
• https://web.archive.org/web/20140126212101/http://www.baesystemsdetica.com.au/Research/Advisories/Webuzo-Multiple-Vulne…