Description
acccheck.pl in acccheck 0.2.1 allows Command Injection via shell metacharacters in a username or password file, as demonstrated by injection into an smbclient command line.
References (1)
Core 1
Core References
Exploit, Third Party Advisory x_refsource_misc
http://b3n7s.github.io/acccheck-command-injection.html
Scores
CVSS v3
9.8
EPSS
0.0263
EPSS Percentile
83.6%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-78
Status
published
Products (1)
acccheck_project/acccheck.pl
0.2.1
Published
Jun 13, 2018
Tracked Since
Feb 18, 2026