1. Home
  2. CVE Database
  3. CVE-2008-5810
HIGH · 10.0

CVE-2008-5810

WBPublish (aka WBPublish.exe) in Fujitsu-Siemens WebTransactions 7.0, 7.1, and possibly other versions allows remote attackers to execute arbitrary commands via shell metacharacters in input that is s...

Vulnerability Description

WBPublish (aka WBPublish.exe) in Fujitsu-Siemens WebTransactions 7.0, 7.1, and possibly other versions allows remote attackers to execute arbitrary commands via shell metacharacters in input that is sent through HTTP and improperly used during temporary session data cleanup, possibly related to (1) directory names, (2) template names, and (3) session IDs.

CVSS Score

10.0

HIGH

AV:N/AC:L/Au:N/C:C/I:C/A:C
Confidentiality
COMPLETE
Integrity
COMPLETE
Availability
COMPLETE

Affected Products

VendorProductVersions
Fujitsu-SiemensWebtransactions7.0

Related Weaknesses (CWE)

CWE-20

References

FAQ

What is CVE-2008-5810?

CVE-2008-5810 is a vulnerability with a CVSS score of 10.0 (HIGH). WBPublish (aka WBPublish.exe) in Fujitsu-Siemens WebTransactions 7.0, 7.1, and possibly other versions allows remote attackers to execute arbitrary commands via shell metacharacters in input that is s...

How severe is CVE-2008-5810?

CVE-2008-5810 has been rated HIGH with a CVSS base score of 10.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2008-5810?

Check the references section above for vendor advisories and patch information. Affected products include: Fujitsu-Siemens Webtransactions.