CVE-2015-2962 CGI RESCUE BloBee 1.20 and earlier allows remote attackers to write to arbitrary files, and consequently execute arbitrary code, via unspecified vectors.
HighCVSS 7.5
EPSS 2.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
CGI RESCUE BloBee 1.20 and earlier allows remote attackers to write to arbitrary files, and consequently execute arbitrary code, via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cgi rescue blobee | <= 1.12 | No fix listed |
| cgi rescue blobee | = 0.20 | No fix listed |
| cgi rescue blobee | = 0.21 | No fix listed |
| cgi rescue blobee | = 1.00 | No fix listed |
| cgi rescue blobee | = 1.01 | No fix listed |
| cgi rescue blobee | = 1.02 | No fix listed |
| cgi rescue blobee | = 1.03 | No fix listed |
| cgi rescue blobee | = 1.04 | No fix listed |
| cgi rescue blobee | = 1.05 | No fix listed |
| cgi rescue blobee | = 1.10 | No fix listed |
| cgi rescue blobee | = 1.11 | No fix listed |
References
- JVN#24336273 third-party-advisory vendor-advisory
- JVNDB-2015-000087 third-party-advisory vendor-advisory
- 75183 vdb-entry