CVE-2013-1898

Thumbshooter 0.1.5 - Remote Code Execution via URL Shell Metacharacters

Title source: llm
STIX 2.1

Description

lib/thumbshooter.rb in the Thumbshooter 0.1.5 gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a URL.

References (5)

Core 5
Core References
Mailing List mailing-list x_refsource_fulldisc
http://seclists.org/fulldisclosure/2013/Mar/218
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/91839
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2013/03/26/3
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2013/03/26/13

Scores

EPSS 0.0098
EPSS Percentile 77.0%

Details

CWE
CWE-94
Status published
Products (2)
digineo/thumbshooter 0.1.5
rubygems/thumbshooter 0RubyGems
Published Apr 09, 2013
Tracked Since Feb 18, 2026