CVEvulnerability
CVE-2013-7465
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2018-10-05
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-287
Description
Ice Cold Apps Servers Ultimate 6.0.2(12) does not require authentication for TELNET, SSH, or FTP, which allows remote attackers to execute arbitrary code by uploading PHP scripts.
Affected configurations
• icecoldapps servers ultimate 6.0.2
Related
Weakness · CWE (1)
- CWE-287 Improper Authentication weakness
References
- http://www.vapid.dhs.org/advisories/ultimate-server-android-vulns.html Exploit, Third Party Advisory
- http://www.vapidlabs.com/advisory.php?v=108 Exploit, Third Party Advisory
- http://www.vapid.dhs.org/advisories/ultimate-server-android-vulns.html Exploit, Third Party Advisory
- http://www.vapidlabs.com/advisory.php?v=108 Exploit, Third Party Advisory