CVE-2014-1683

The bashMail function in cms/data/skins/techjunkie/fragments/contacts/functions.php in SkyBlueCanvas CMS before 1.1 r248-04, when the pid parameter is 4, allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) name, (2) email, (3) subject, or (4) message parameter to index.php.

CVSS v2.0

6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

31.41% chance of exploitation in the next 30 days, 98th percentile

Published

2014-01-29

Updated

2024-08-06

Proof-of-concept exploits (2)

• http://www.exploit-db.com/exploits/31183
• http://www.exploit-db.com/exploits/31432

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/skybluecanvas_exec.rb

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/31432
• https://www.exploit-db.com/exploits/31183

References

• CVE Record
• NVD entry

Related

• CVE-2014-1677
• CVE-2014-1684
• CVE-2014-1671
• CVE-2014-1691
• CVE-2014-1665
• CVE-2014-1695