CVEvulnerability
CVE-2007-5926
9.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-11-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.0 HIGH — AV:N/AC:L/Au:S/C:C/I:C/A:C
- Weaknesses
- CWE-20
Description
OpenBase 10.0.5 and earlier allows remote authenticated users to execute arbitrary commands via shell metacharacters in arguments to the (1) AsciiBackup, (2) OEMLicenseInstall, and possibly other stored procedures.
Affected configurations
• openbase international ltd openbase (<= 10.0.5)
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://secunia.com/advisories/27525 Vendor Advisory
- http://www.netragard.com/pdfs/research/NETRAGARD-20070313-OPENBASE.txt Exploit
- http://www.securityfocus.com/bid/26347 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38291 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/27525 Vendor Advisory
- http://www.netragard.com/pdfs/research/NETRAGARD-20070313-OPENBASE.txt Exploit
- http://www.securityfocus.com/bid/26347 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38291 exchange.xforce.ibmcloud.com