CrawlTrack up to 3.2.6 Remote Code Execution

Summaryinfo

A vulnerability has been found in CrawlTrack and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to Remote Code Execution. This vulnerability is referenced as CVE-2010-4537. No exploit is available. The affected component should be upgraded.

Detailsinfo

A vulnerability, which was classified as critical, has been found in CrawlTrack. This issue affects an unknown part. The manipulation with an unknown input leads to a remote code execution vulnerability. Impacted is confidentiality, integrity, and availability. The summary by CVE is:

Unspecified vulnerability in CrawlTrack before 3.2.7, when a public stats page is provided, allows remote attackers to execute arbitrary PHP code via unknown vectors.

The weakness was published 01/13/2011 (Website). The advisory is shared at crawltrack.net. The identification of this vulnerability is CVE-2010-4537 since 12/09/2010. The attack may be initiated remotely. No form of authentication is needed for a successful exploitation. Neither technical details nor an exploit are publicly available.

Upgrading to version 3.2.6 eliminates this vulnerability.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Name

• CrawlTrack

Version

• 1.0.0
• 1.0.1
• 1.0.2
• 1.1.0
• 1.1.1
• 1.2.0
• 1.3.0
• 1.3.1
• 1.4.0
• 1.4.1
• 1.5.0
• 1.5.1
• 1.6.0
• 1.7.0
• 1.7.1
• 2.0.0
• 2.1.0
• 2.2.0
• 2.2.1
• 2.3.0
• 3.0.0
• 3.1.0
• 3.1.1
• 3.1.2
• 3.1.3
• 3.2.0
• 3.2.1
• 3.2.2
• 3.2.3
• 3.2.4
• 3.2.5
• 3.2.6

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion