CVE-2015-2962
CGI RESCUE BloBee <= 1.20 - Arbitrary File Write and Remote Code Execution
Title source: llmDescription
CGI RESCUE BloBee 1.20 and earlier allows remote attackers to write to arbitrary files, and consequently execute arbitrary code, via unspecified vectors.
References (3)
Core 3
Core References
Vendor Advisory third-party-advisory
x_refsource_jvndb
http://jvndb.jvn.jp/jvndb/JVNDB-2015-000087
Vendor Advisory third-party-advisory
x_refsource_jvn
http://jvn.jp/en/jp/JVN24336273/index.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/75183
Scores
EPSS
0.0267
EPSS Percentile
84.0%
Details
CWE
CWE-20
Status
published
Products (11)
cgi_rescue/blobee
0.20
cgi_rescue/blobee
0.21
cgi_rescue/blobee
1.00
cgi_rescue/blobee
1.01
cgi_rescue/blobee
1.02
cgi_rescue/blobee
1.03
cgi_rescue/blobee
1.04
cgi_rescue/blobee
1.05
cgi_rescue/blobee
1.10
cgi_rescue/blobee
1.11
... and 1 more
Published
Jun 13, 2015
Tracked Since
Feb 18, 2026