CVEvulnerability

CVE-2015-7698

9.0 HIGH Published 2015-10-21 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2015-10-21
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
9.0 HIGH — AV:N/AC:L/Au:S/C:C/I:C/A:C
Weaknesses
CWE-78

Description

icewind1991 SMB before 1.0.3 allows remote authenticated users to execute arbitrary SMB commands via shell metacharacters in the user argument in the (1) listShares function in Server.php or the (2) connect or (3) read function in Share.php.

Affected configurations

• owncloud smb (<= 1.0.2) • owncloud owncloud (<= 8.1.1)

Related

Weakness · CWE (1)

  • CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness

References