CVE-2013-10039
BaseFortify
Publication date: 2025-07-31
Last updated on: 2025-07-31
Assigner: VulnCheck
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| gestioip | gestioip | 3.0 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-78 | The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a command injection flaw in GestioIP 3.0 and earlier versions in the ip_checkhost.cgi script. An attacker can craft input to the 'ip' parameter that includes embedded base64-encoded payloads, allowing them to execute arbitrary shell commands on the server. Depending on the deployment, authentication may be required to exploit this vulnerability.
How can this vulnerability impact me? :
The vulnerability allows attackers to execute arbitrary commands on the server, which can lead to unauthorized access, data compromise, system control, and potential disruption of services. This can severely impact the security and integrity of the affected system.