CVE-2014-5073
vmturbo operations manager: no CVSS score yet. EPSS 76% chance of exploitation in the next 30 days.
vmtadmin.cgi in VMTurbo Operations Manager before 4.6 build 28657 allows remote attackers to execute arbitrary commands via shell metacharacters in the fileDate parameter in a DOWN call.
- EPSS
- 76% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- vmturbo:operations_manager
References
- http://disse.cting.org/2014/07/30/vmturbo-operation-manager-remote-command-execution/
- http://packetstormsecurity.com/files/127864/VMTurbo-Operations-Manager-4.6-vmtadmin.cgi-Remote-Command-Execution.html
- http://secunia.com/advisories/58880
- http://secunia.com/secunia_research/2014-8/
- http://www.exploit-db.com/exploits/34335