CVE-2010-4099
NitroSecurity NitroView ESM 8.4.0a - Remote Command Execution via Request Parameter
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2010-4099. PoCs published by s_n, Filip Palian.
AI-analyzed exploit summary This exploit leverages a command injection vulnerability in NitroView ESM by submitting a maliciously crafted POST request to execute arbitrary commands on the target system. The vulnerability arises due to insufficient input sanitization, allowing command execution via the 'Request' parameter.
Description
ess.pm in NitroSecurity NitroView ESM 8.4.0a, when ESSPMDebug is enabled, allows remote attackers to execute arbitrary commands via shell metacharacters in the Request parameter to ess.
Exploits (2)
This exploit leverages a command injection vulnerability in NitroView ESM by submitting a maliciously crafted POST request to execute arbitrary commands on the target system. The vulnerability arises due to insufficient input sanitization, allowing command execution via the 'Request' parameter.
The exploit leverages a command injection vulnerability in the 'ess.pm' Perl module of NitroView ESM due to improper input validation. By manipulating the IFS (Internal Field Separator) and sending a crafted POST request, an attacker can achieve remote code execution without authentication.