CVE-2003-1248 H-Sphere WebShell 2.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) mode and (2) zipfile parameters in a URL request.
HighCVSS 7.5
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
H-Sphere WebShell 2.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) mode and (2) zipfile parameters in a URL request.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| positive software h-sphere | = 2.3_rc3 | No fix listed |
References
- psoft.net patch
- hsphere-webshell-encodefilename-execution(11001) patch vdb-entry
- 20030106 Remote root vuln in HSphere WebShell mailing-list patch vendor-advisory
- 6537 patch vdb-entry
- 6539 patch vdb-entry
- 1005893 vdb-entry