Vulnerabilities (CVE)

Filtered by vendor Verlihub-project Subscribe
Filtered by product Verlihub
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2008-5705 1 Verlihub-project 1 Verlihub 2023-12-10 9.3 HIGH N/A
The cTrigger::DoIt function in src/ctrigger.cpp in the trigger mechanism in the daemon in Verlihub 0.9.8d-RC2 and earlier, when user triggers are enabled, allows remote attackers to execute arbitrary commands via shell metacharacters in an argument.
CVE-2008-5706 1 Verlihub-project 1 Verlihub 2023-12-10 6.9 MEDIUM N/A
The cTrigger::DoIt function in src/ctrigger.cpp in the trigger mechanism in the daemon in Verlihub 0.9.8d-RC2 and earlier allows local users to overwrite arbitrary files via a symlink attack on the /tmp/trigger.tmp temporary file.