Last Modified: July 11, 2017
Artekopia Netjuke before 1.0 b7 allows remote attackers to execute arbitrary code on the web server, possibly via the section parameter, which is passed to an eval call.
Access Vector: Network
Access Complexity: Low
Authentication: None
Confidentiality Impact: Partial
Integrity Impact: Partial
Availability Impact: Partial
Base Score: 7.5
Exploitability Score: 10.0
Impact Score: 6.4
CVSS V2: AV:N/AC:L/Au:N/C:P/I:P/A:P
NVD-CWE-Other
| Condition | Configuration | |
|---|---|---|
| OR | ||
| OR | ||
| cpe:2.3:a:netjuke:netjuke:1.0_b1:*:*:*:*:*:*:* Part: a Vendor: netjuke | Alle Schwachstellen für netjuke | |
| cpe:2.3:a:netjuke:netjuke:1.0_b4:*:*:*:*:*:*:* Part: a Vendor: netjuke | Alle Schwachstellen für netjuke | |
| cpe:2.3:a:netjuke:netjuke:1.0_b6:*:*:*:*:*:*:* Part: a Vendor: netjuke | Alle Schwachstellen für netjuke | |
| cpe:2.3:a:netjuke:netjuke:1.0_b3:*:*:*:*:*:*:* Part: a Vendor: netjuke | Alle Schwachstellen für netjuke | |
| cpe:2.3:a:netjuke:netjuke:1.0_b2:*:*:*:*:*:*:* Part: a Vendor: netjuke | Alle Schwachstellen für netjuke | |
| cpe:2.3:a:netjuke:netjuke:1.0_b5:*:*:*:*:*:*:* Part: a Vendor: netjuke | Alle Schwachstellen für netjuke | |
<?xml version="1.0" ?>
<set operator="and">
<set operator="or">
<prop key="application" value="cpe:2.3:a:netjuke:netjuke:1.0_b1:*:*:*:*:*:*:*"/>
<prop key="application" value="cpe:2.3:a:netjuke:netjuke:1.0_b4:*:*:*:*:*:*:*"/>
<prop key="application" value="cpe:2.3:a:netjuke:netjuke:1.0_b6:*:*:*:*:*:*:*"/>
<prop key="application" value="cpe:2.3:a:netjuke:netjuke:1.0_b3:*:*:*:*:*:*:*"/>
<prop key="application" value="cpe:2.3:a:netjuke:netjuke:1.0_b2:*:*:*:*:*:*:*"/>
<prop key="application" value="cpe:2.3:a:netjuke:netjuke:1.0_b5:*:*:*:*:*:*:*"/>
</set>
<prop key="program_influence" value="input"/>
<prop key="range" value="remote"/>
</set>
<?xml version="1.0" ?>
<set operator="and">
<prop key="target" value="host"/>
<set operator="or">
<prop key="program_influence" value="input"/>
<prop key="program_influence" value="output"/>
<prop key="program_influence" value="existence"/>
</set>
<prop key="data" value="any"/>
<set operator="or">
<prop key="data_influence" value="read"/>
<prop key="data_influence" value="write"/>
<prop key="data_influence" value="delete"/>
</set>
<set operator="or">
<prop key="range" value="remote"/>
<prop key="range" value="local"/>
</set>
</set>