CVE-2010-4099

ess.pm in NitroSecurity NitroView ESM 8.4.0a, when ESSPMDebug is enabled, allows remote attackers to execute arbitrary commands via shell metacharacters in the Request parameter to ess.

CVSS v2.0

6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

2.63% chance of exploitation in the next 30 days, 84th percentile

Published

2010-10-27

Updated

2024-08-07

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/15318

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/34932
• https://www.exploit-db.com/exploits/15318

References

• CVE Record
• NVD entry

Related

• CVE-2010-4094
• CVE-2010-4107
• CVE-2010-4091
• CVE-2010-4111
• CVE-2010-4077
• CVE-2010-4120