CVE-2010-2445

freeciv 2.2 before 2.2.1 and 2.3 before 2.3.0 allows attackers to read arbitrary files or execute arbitrary commands via a scenario that contains Lua functionality, related to the (1) os, (2) io, (3) package, (4) dofile, (5) loadfile, (6) loadlib, (7) module, and (8) require modules or functions.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

OR cpe:2.3:a:freeciv:freeciv:2.2.0:beta1:*:*:*:*:*:*
cpe:2.3:a:freeciv:freeciv:2.2.0:beta2:*:*:*:*:*:*
cpe:2.3:a:freeciv:freeciv:2.2.0:beta3:*:*:*:*:*:*
cpe:2.3:a:freeciv:freeciv:2.3.0:dev:*:*:*:*:*:*
cpe:2.3:a:freeciv:freeciv:2.2.0:rc1:*:*:*:*:*:*
cpe:2.3:a:freeciv:freeciv:2.2.0:*:*:*:*:*:*:*

Information

Published : 2010-07-08 05:54

Updated : 2021-06-30 10:15


NVD link : CVE-2010-2445

Mitre link : CVE-2010-2445


JSON object : View

CWE
CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Advertisement

dedicated server usa

Products Affected

freeciv

  • freeciv