CVE-2018-12268

acccheck.pl in acccheck 0.2.1 allows Command Injection via shell metacharacters in a username or password file, as demonstrated by injection into an smbclient command line.
References
Link Resource
http://b3n7s.github.io/acccheck-command-injection.html Exploit Third Party Advisory
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:acccheck_project:acccheck.pl:0.2.1:*:*:*:*:*:*:*

Information

Published : 2018-06-13 04:29

Updated : 2019-10-02 17:03


NVD link : CVE-2018-12268

Mitre link : CVE-2018-12268


JSON object : View

CWE
CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Advertisement

dedicated server usa

Products Affected

acccheck_project

  • acccheck.pl