Skip to content

CVE-2014-2935 costview3/xmlrpc_server/xmlrpc.php in CostView in Caldera 9.20 allows remote attackers to execute arbitrary commands via shell metacharacters in a methodCall element in a PHP XMLRPC request.

HighCVSS 10.0 EPSS 4.4%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

costview3/xmlrpc_server/xmlrpc.php in CostView in Caldera 9.20 allows remote attackers to execute arbitrary commands via shell metacharacters in a methodCall element in a PHP XMLRPC request.

Affected products

ProductAffected versionsFixed in
caldera = 9.20 No fix listed

References

  • VU#693092 third-party-advisory us-government-resource
  • 67252 vdb-entry