Search vulnerabilities

Results 2

CVE-2014-3806

Directory traversal vulnerability in cgi-bin/help/doIt.cgi in VMTurbo Operations Manager before 4.6 allows remote attackers to read arbitrary files via a .. (dot dot) in the xml_path parameter.

CVSS 2.0 · 5.0 Medium EPSS 7.7% KEV · Not listed
Vendors
CVE-2014-5073

vmtadmin.cgi in VMTurbo Operations Manager before 4.6 build 28657 allows remote attackers to execute arbitrary commands via shell metacharacters in the fileDate parameter in a DOWN call.

CVSS 2.0 · 7.5 High EPSS 76.3% KEV · Not listed
Vendors