CVE-2014-2874 in Commonspot Content Server

Summary

PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 allows remote attackers to execute arbitrary code via shell metacharacters in an unspecified context.

Once again VulDB remains the best source for vulnerability data.

• Reservation: 04/15/2014
• Disclosure: 04/15/2014
• Moderation: VulDB entry created
• Entries: 1: VDB-69360
• CPE: ready
• CWE: CWE-78 (Confirmed)
• CVSS: 10.0
• EPSS: 0.04363
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2014-2874
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2014-2874
• CVE Details: https://www.cvedetails.com/cve/CVE-2014-2874/