perl.bobbitt.caConfirmation
http://perl.bobbitt.ca/yabbse/index.php?board=2%3Baction=display%3Bthreadid=720 CVE-2003-1456
Mike Bobbitt Album.PL 0.61 - Remote Command Execution
Record summary
CVE-2003-1456 has a selected CVSS score of 5.0; EIP currently links 1 catalogued exploit.
Description
Album.pl 6.1 allows remote attackers to execute arbitrary commands, when an alternative configuration file is used, via unknown attack vectors.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBMike Bobbitt Album.PL 0.61 - Remote Command ExecutionExploitDB exploitby aresu@bosen.netNot analyzed1 file
References
7perl.bobbitt.ca
http://perl.bobbitt.ca/yabbse/index.php?board=2;action=display;threadid=720 3270Third-party advisory
http://securityreason.com/securityalert/3270 20030426 Album.pl Vulnerability - Remote Command Executionmailing list
http://www.securityfocus.com/archive/1/319763 7444vdb entry
http://www.securityfocus.com/bid/7444 albumpl-command-execution(11878)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/11878 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2003-1456