CVE-2003-0398
published 2003-07-02CVE-2003-0398: Vignette StoryServer 4 and 5, and Vignette V/5 and V/6, with the SSI EXEC feature enabled, allows remote attackers to execute arbitrary code via a text…
PriorityP430high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
2.91%
85.3th percentile
Vignette StoryServer 4 and 5, and Vignette V/5 and V/6, with the SSI EXEC feature enabled, allows remote attackers to execute arbitrary code via a text variable to a Vignette Application that is later displayed.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| vignette | content_suite | — | — |
| vignette | content_suite | — | — |
| vignette | storyserver | — | — |
| vignette | storyserver | — | — |
| vignette | storyserver | — | — |
| vignette | vignette | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://marc.info/?l=bugtraq&m=105405734223874&w=2http://www.iss.net/security_center/static/12077.phphttp://www.s21sec.com/es/avisos/s21sec-016-en.txthttp://www.securityfocus.com/bid/7685http://marc.info/?l=bugtraq&m=105405734223874&w=2http://www.iss.net/security_center/static/12077.phphttp://www.s21sec.com/es/avisos/s21sec-016-en.txthttp://www.securityfocus.com/bid/7685
2003-07-02
Published