CVE-2014-1683 in SkyBlueCanvas信息

摘要

由 VulDB • 2026-07-23

SkyBlueCanvas CMS v1.1 r248-04之前版本中cms/data/skins/techjunkie/fragments/contacts/functions.php文件中的bashMail函数存在漏洞，当pid参数为4时，远程攻击者可通过向index.php发送包含shell元字符的(1)name、(2)email、(3)subject或(4)message参数来执行任意命令。

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

预定

2014-01-28

披露

2014-01-29

管理

已接受

条目

VDB-66250

CPE

准备好

CWE

CWE-134 (已确认)

利用

下载

CVSS

6.8 (NVD)

EPSS

0.31415

KEV

否

活动

非常低

来源

MITRE	https://www.cve.org/CVERecord?id=CVE-2014-1683
NVD	https://nvd.nist.gov/vuln/detail/CVE-2014-1683
CVE Details	https://www.cvedetails.com/cve/CVE-2014-1683/

◂ 上一步一览下一步 ▸

Interested in the pricing of exploits?

See the underground prices here!