CVE-2011-10019 Spreecommerce < 0.60.2 Search Parameter RCE
CriticalCVSS 10.0
EPSS 6.3%
Framework module
Public exploit
PoC
- Published
- Updated
- Exploit status
- Public exploit available
Description
Spreecommerce versions prior to 0.60.2 contains a remote command execution vulnerability in its search functionality. The application fails to properly sanitize input passed via the search[send][] parameter, which is dynamically invoked using Ruby’s send method. This allows attackers to execute arbitrary shell commands on the server without authentication.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rubygems spree(RubyGems) | < 0.60.2 | 0.60.2 |
| rubygems spree(RubyGems) | = 0.0.5 | No fix listed |
| rubygems spree(RubyGems) | = 0.0.6 | No fix listed |
| rubygems spree(RubyGems) | = 0.0.7 | No fix listed |
| rubygems spree(RubyGems) | = 0.0.8 | No fix listed |
| rubygems spree(RubyGems) | = 0.0.9 | No fix listed |
| rubygems spree(RubyGems) | = 0.10.0 | No fix listed |
| rubygems spree(RubyGems) | = 0.10.0.beta | No fix listed |
| rubygems spree(RubyGems) | = 0.10.1 | No fix listed |
| rubygems spree(RubyGems) | = 0.10.2 | No fix listed |
| rubygems spree(RubyGems) | = 0.11.0 | No fix listed |
| rubygems spree(RubyGems) | = 0.11.1 | No fix listed |
| rubygems spree(RubyGems) | = 0.11.2 | No fix listed |
| rubygems spree(RubyGems) | = 0.11.3 | No fix listed |
| rubygems spree(RubyGems) | = 0.11.4 | No fix listed |
| rubygems spree(RubyGems) | = 0.2.0 | No fix listed |
| rubygems spree(RubyGems) | = 0.30.0 | No fix listed |
| rubygems spree(RubyGems) | = 0.30.0.beta1 | No fix listed |
| rubygems spree(RubyGems) | = 0.30.1 | No fix listed |
| rubygems spree(RubyGems) | = 0.30.2 | No fix listed |
| rubygems spree(RubyGems) | = 0.4.0 | No fix listed |
| rubygems spree(RubyGems) | = 0.4.1 | No fix listed |
| rubygems spree(RubyGems) | = 0.40.0 | No fix listed |
| rubygems spree(RubyGems) | = 0.40.1 | No fix listed |
| rubygems spree(RubyGems) | = 0.40.2 | No fix listed |
Show 28 more
| Product | Affected versions | Fixed in |
|---|---|---|
| rubygems spree(RubyGems) | = 0.40.3 | No fix listed |
| rubygems spree(RubyGems) | = 0.40.4 | No fix listed |
| rubygems spree(RubyGems) | = 0.5.0 | No fix listed |
| rubygems spree(RubyGems) | = 0.5.1 | No fix listed |
| rubygems spree(RubyGems) | = 0.50.0 | No fix listed |
| rubygems spree(RubyGems) | = 0.50.1 | No fix listed |
| rubygems spree(RubyGems) | = 0.50.2 | No fix listed |
| rubygems spree(RubyGems) | = 0.50.3 | No fix listed |
| rubygems spree(RubyGems) | = 0.50.4 | No fix listed |
| rubygems spree(RubyGems) | = 0.6.0 | No fix listed |
| rubygems spree(RubyGems) | = 0.60.0 | No fix listed |
| rubygems spree(RubyGems) | = 0.60.0.RC1 | No fix listed |
| rubygems spree(RubyGems) | = 0.60.1 | No fix listed |
| rubygems spree(RubyGems) | = 0.7.0 | No fix listed |
| rubygems spree(RubyGems) | = 0.7.1 | No fix listed |
| rubygems spree(RubyGems) | = 0.8.0 | No fix listed |
| rubygems spree(RubyGems) | = 0.8.1 | No fix listed |
| rubygems spree(RubyGems) | = 0.8.2 | No fix listed |
| rubygems spree(RubyGems) | = 0.8.3 | No fix listed |
| rubygems spree(RubyGems) | = 0.8.4 | No fix listed |
| rubygems spree(RubyGems) | = 0.8.5 | No fix listed |
| rubygems spree(RubyGems) | = 0.9.0 | No fix listed |
| rubygems spree(RubyGems) | = 0.9.1 | No fix listed |
| rubygems spree(RubyGems) | = 0.9.2 | No fix listed |
| rubygems spree(RubyGems) | = 0.9.3 | No fix listed |
| rubygems spree(RubyGems) | = 0.9.4 | No fix listed |
| rubygems spree | < 0.60.2 | 0.60.2 |
| spreecommerce spree | < 0.60.2 | 0.60.2 |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com product
- github.com exploit
- github.com product
- raw.githubusercontent.com exploit third-party-advisory
- web.archive.org patch release-notes vendor-advisory
- www.exploit-db.com exploit vdb-entry
- www.vulncheck.com third-party-advisory
- github.com