CVE-2012-5878 Bulb Security Smartphone Pentest Framework (SPF) 0.1.2 through 0.1.4 allows remote attackers to execute arbitrary commands via shell metacharacters in the hostingPath parameter to (1) SEAttack.pl or (...
CriticalCVSS 9.8
EPSS 9.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Bulb Security Smartphone Pentest Framework (SPF) 0.1.2 through 0.1.4 allows remote attackers to execute arbitrary commands via shell metacharacters in the hostingPath parameter to (1) SEAttack.pl or (2) CSAttack.pl in frameworkgui/ or the (3) appURLPath parameter to frameworkgui/attachMobileModem.pl.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bulbsecurity smartphone pentest framework | >= 0.1.2, <= 0.1.4 | No fix listed |
References
- www.htbridge.com not-applicable third-party-advisory
- www.htbridge.com exploit third-party-advisory