Search criteria
3 vulnerabilities found for observer by project-observer
CVE-2008-4318 (GCVE-0-2008-4318)
Vulnerability from nvd – Published: 2008-09-29 18:00 – Updated: 2024-08-07 10:08
VLAI
Summary
Observer 0.3.2.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the query parameter to (1) whois.php or (2) netcmd.php.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
3 references
| URL | Tags |
|---|---|
| https://www.exploit-db.com/exploits/6559 | exploitx_refsource_EXPLOIT-DB |
| http://securityreason.com/securityalert/4322 | third-party-advisoryx_refsource_SREASON |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
Date Public
2008-09-24 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T10:08:35.253Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "6559",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB",
"x_transferred"
],
"url": "https://www.exploit-db.com/exploits/6559"
},
{
"name": "4322",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/4322"
},
{
"name": "observer-whois-netcmd-command-execution(45398)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/45398"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2008-09-24T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Observer 0.3.2.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the query parameter to (1) whois.php or (2) netcmd.php."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-09-28T12:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "6559",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB"
],
"url": "https://www.exploit-db.com/exploits/6559"
},
{
"name": "4322",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/4322"
},
{
"name": "observer-whois-netcmd-command-execution(45398)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/45398"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2008-4318",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Observer 0.3.2.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the query parameter to (1) whois.php or (2) netcmd.php."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "6559",
"refsource": "EXPLOIT-DB",
"url": "https://www.exploit-db.com/exploits/6559"
},
{
"name": "4322",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/4322"
},
{
"name": "observer-whois-netcmd-command-execution(45398)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/45398"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2008-4318",
"datePublished": "2008-09-29T18:00:00.000Z",
"dateReserved": "2008-09-29T00:00:00.000Z",
"dateUpdated": "2024-08-07T10:08:35.253Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
FKIE_CVE-2008-4318
Vulnerability from fkie_nvd - Published: 2008-09-29 19:25 - Updated: 2026-04-23 00:35
Severity
Summary
Observer 0.3.2.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the query parameter to (1) whois.php or (2) netcmd.php.
References
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| project-observer | observer | * | |
| project-observer | observer | 0.1.0 | |
| project-observer | observer | 0.1.1 | |
| project-observer | observer | 0.1.2 | |
| project-observer | observer | 0.2.0 | |
| project-observer | observer | 0.2.1 | |
| project-observer | observer | 0.2.2 | |
| project-observer | observer | 0.2.3 | |
| project-observer | observer | 0.2.4 | |
| project-observer | observer | 0.2.5 | |
| project-observer | observer | 0.3.1 | |
| project-observer | observer | 0.3.2 | |
| project-observer | observer | 0.30-pre-1 |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:project-observer:observer:*:*:*:*:*:*:*:*",
"matchCriteriaId": "863B2AA5-844E-4B9B-9379-E9CD6D28A615",
"versionEndIncluding": "0.3.2.1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:project-observer:observer:0.1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "C8782383-D111-4467-B81F-D0B93A578113",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:project-observer:observer:0.1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "98C486ED-FA00-4FD2-987B-ED6432862518",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:project-observer:observer:0.1.2:*:*:*:*:*:*:*",
"matchCriteriaId": "39E2218A-9FE3-4E9A-8769-D4995E761ACB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:project-observer:observer:0.2.0:*:*:*:*:*:*:*",
"matchCriteriaId": "0D103CBE-54CE-4552-87E7-06E8AA9810AF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:project-observer:observer:0.2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "315DDAE1-A228-4E6E-9D8F-07F93FE8F498",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:project-observer:observer:0.2.2:*:*:*:*:*:*:*",
"matchCriteriaId": "A3037E0C-940A-46FB-8B74-338A5BF58EAD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:project-observer:observer:0.2.3:*:*:*:*:*:*:*",
"matchCriteriaId": "B9DCBD01-52FD-4829-86EF-D22905222036",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:project-observer:observer:0.2.4:*:*:*:*:*:*:*",
"matchCriteriaId": "3FCEDE50-A0C4-48E3-B4F0-769FD3FE9C2A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:project-observer:observer:0.2.5:*:*:*:*:*:*:*",
"matchCriteriaId": "4A49D13B-3E0A-4D9E-9C40-1660319DA4F7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:project-observer:observer:0.3.1:*:*:*:*:*:*:*",
"matchCriteriaId": "6D0731A9-2DF1-493C-9D51-0A0B8C60C088",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:project-observer:observer:0.3.2:*:*:*:*:*:*:*",
"matchCriteriaId": "48EE5F48-E63F-4F21-A80D-9CA4C0370CE2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:project-observer:observer:0.30-pre-1:*:*:*:*:*:*:*",
"matchCriteriaId": "1F18AD0E-BE4D-4842-8274-E3C0C541FE81",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Observer 0.3.2.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the query parameter to (1) whois.php or (2) netcmd.php."
},
{
"lang": "es",
"value": "El analizador de redes Observer v0.3.2.1 y anteriores permite a atacantes remotos ejecutar c\u00f3digo de su elecci\u00f3n mediante la utilizaci\u00f3n de meta-caracteres del int\u00e9rprete de comandos en el par\u00e1metro \"query\" en whois.php o netcmd.php."
}
],
"id": "CVE-2008-4318",
"lastModified": "2026-04-23T00:35:47.467",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "HIGH",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 10.0,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
]
},
"published": "2008-09-29T19:25:32.167",
"references": [
{
"source": "cve@mitre.org",
"url": "http://securityreason.com/securityalert/4322"
},
{
"source": "cve@mitre.org",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/45398"
},
{
"source": "cve@mitre.org",
"url": "https://www.exploit-db.com/exploits/6559"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://securityreason.com/securityalert/4322"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/45398"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://www.exploit-db.com/exploits/6559"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-20"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
CVE-2008-4318 (GCVE-0-2008-4318)
Vulnerability from cvelistv5 – Published: 2008-09-29 18:00 – Updated: 2024-08-07 10:08
VLAI
Summary
Observer 0.3.2.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the query parameter to (1) whois.php or (2) netcmd.php.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
3 references
| URL | Tags |
|---|---|
| https://www.exploit-db.com/exploits/6559 | exploitx_refsource_EXPLOIT-DB |
| http://securityreason.com/securityalert/4322 | third-party-advisoryx_refsource_SREASON |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
Date Public
2008-09-24 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T10:08:35.253Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "6559",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB",
"x_transferred"
],
"url": "https://www.exploit-db.com/exploits/6559"
},
{
"name": "4322",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/4322"
},
{
"name": "observer-whois-netcmd-command-execution(45398)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/45398"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2008-09-24T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Observer 0.3.2.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the query parameter to (1) whois.php or (2) netcmd.php."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-09-28T12:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "6559",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB"
],
"url": "https://www.exploit-db.com/exploits/6559"
},
{
"name": "4322",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/4322"
},
{
"name": "observer-whois-netcmd-command-execution(45398)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/45398"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2008-4318",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Observer 0.3.2.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the query parameter to (1) whois.php or (2) netcmd.php."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "6559",
"refsource": "EXPLOIT-DB",
"url": "https://www.exploit-db.com/exploits/6559"
},
{
"name": "4322",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/4322"
},
{
"name": "observer-whois-netcmd-command-execution(45398)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/45398"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2008-4318",
"datePublished": "2008-09-29T18:00:00.000Z",
"dateReserved": "2008-09-29T00:00:00.000Z",
"dateUpdated": "2024-08-07T10:08:35.253Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}