Unscored severity · published Nov 10, 2007
CVE-2007-5926
OpenBase 10.0.5 and earlier allows remote authenticated users to execute arbitrary commands via shell metacharacters in arguments to the (1) AsciiBackup, (2) OEMLicenseInstall,…
–
CVSS
3.4%
EPSS
No
On KEV
Description
OpenBase 10.0.5 and earlier allows remote authenticated users to execute arbitrary commands via shell metacharacters in arguments to the (1) AsciiBackup, (2) OEMLicenseInstall, and possibly other stored procedures.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.4% · higher than 89% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OP
Openbase · Openbase International Ltd
through 10.0.5 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-5926
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-5926
Vendor Advisory
http://secunia.com/advisories/27525
Exploit
http://www.netragard.com/pdfs/research/NETRAGARD-20070313-OPENBASE.txt
Exploit
http://www.securityfocus.com/bid/26347
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/38291
More from Openbase
8.1
CVE-2007-5927
Directory traversal vulnerability in OpenBase 10.0.5 and earlier allows remote authenticated users to create files with arbitrary contents via a
8.1
CVE-2007-5928
OpenBase 10.0.5 and earlier allows remote authenticated users to trigger a free of an arbitrary memory location via long strings in a SELECT statement
–
CVE-2007-5929
Buffer overflow in OpenBase 10.0.5 and earlier might allow remote authenticated users to execute arbitrary code or cause a denial of service (daemon crash) by creating a stored…
–
CVE-2006-5851
openexec in OpenBase SQL before 10.0.1 allows local users to create arbitrary files via a symlink attack on the /tmp/output file, a different vulnerability than CVE-2006-5328
–
CVE-2006-5852
Untrusted search path vulnerability in openexec in OpenBase SQL before 10.0.1 allows local users to gain privileges via a modified PATH that references a malicious helper binary,…