Description
Igreks MilkyStep Light 0.94 and earlier and Professional 1.82 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors.
References (4)
Core 4
Core References
Third Party Advisory x_refsource_confirm
http://jvn.jp/en/jp/JVN05559185/995646/index.html
Vendor Advisory third-party-advisory
x_refsource_jvndb
http://jvndb.jvn.jp/jvndb/JVNDB-2015-000080
Vendor Advisory third-party-advisory
x_refsource_jvn
http://jvn.jp/en/jp/JVN05559185/index.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/75074
Scores
EPSS
0.0162
EPSS Percentile
73.0%
Details
CWE
CWE-78
Status
published
Products (3)
igreks/milkystep_light
< 0.94
igreks/milkystep_professional
< 1.82
igreks/milkystep_professional_oem
< 1.82
Published
Jun 13, 2015
Tracked Since
Feb 18, 2026