CVE-2014-7260
ULTRAPOP.JP i-HTTPD - Remote Code Execution via SSI Directives in File Upload BBS
Title source: llmDescription
The Server Side Includes (SSI) implementation in the File Upload BBS component in ULTRAPOP.JP i-HTTPD allows remote attackers to execute arbitrary commands by uploading files containing commands in SSI directives.
References (3)
Core 3
Core References
Vendor Advisory third-party-advisory
x_refsource_jvndb
http://jvndb.jvn.jp/jvndb/JVNDB-2014-000143
Vendor Advisory x_refsource_misc
http://jvn.jp/en/jp/JVN16406395/360573/index.html
Vendor Advisory third-party-advisory
x_refsource_jvn
http://jvn.jp/en/jp/JVN16406395/index.html
Scores
EPSS
0.0210
EPSS Percentile
79.4%
Details
CWE
CWE-94
Status
published
Products (1)
ultrapop/i-httpd
Published
Dec 12, 2014
Tracked Since
Feb 18, 2026