CVE-2013-3506
08.05.2013, 12:09
cgi-bin/performance/perfchart.cgi in the Performance component in GroundWork Monitor Enterprise 6.7.0 does not properly restrict XML content, which allows remote attackers to execute arbitrary commands by creating a .shtml file and leveraging Server Side Includes (SSI) functionality.Enginsight
| Vendor | Product | Version |
|---|---|---|
| gwos | groundwork_monitor | 6.7.0 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References