Ipcop - vulnerabilities (CVEs)

6 CVEs in 1 products, 0 in the last 30 days, newest from 2025-11-14.

Products

CVE-2021-4466 - CVSS 8.7 (high), 2025-11-14: IPCop versions up to and including 2.1.9 contain an authenticated remote code execution vulnerability within the web-based administration interface. The email…
CVE-2013-7418 - CVSS 6.5 (medium), 2015-01-02: cgi-bin/iptablesgui.cgi in IPCop (aka IPCop Firewall) before 2.1.5 allows remote authenticated users to execute arbitrary code via shell metacharacters in the…
CVE-2013-7417 - CVSS 4.3 (medium), 2015-01-02: Cross-site scripting (XSS) vulnerability in cgi-bin/ipinfo.cgi in IPCop (aka IPCop Firewall) before 2.1.3 allows remote attackers to inject arbitrary web…
CVE-2005-4660 - CVSS 1.2 (low), 2005-12-31: Race condition in IPCop (aka IPCop Firewall) before 1.4.10 might allow local users to overwrite system configuration files and gain privileges by replacing a…
CVE-2005-4659 - CVSS 2.1 (low), 2005-12-31: IPCop (aka IPCop Firewall) before 1.4.10 has world-readable permissions for the backup.key file, which might allow local users to overwrite system…
CVE-2004-1210 - CVSS 6.8 (medium), 2005-01-10: Cross-site scripting (XSS) vulnerability in proxylog.dat in IPCop 1.4.1 and possibly other versions, allows remote attackers to inject arbitrary web script or…