{"uuid": "05443591-e66a-4c38-bd19-91c4a5c85749", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-10026", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/spree_searchlogic_exec.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"joernchen \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits an arbitrary command execution vulnerability in\\n          the Spreecommerce API searchlogic for versions 0.50.0 and earlier.\\n          Unvalidated input is called via the Ruby send method allowing command\\n          execution.\", \"disclosure_date\": \"2011-04-19\", \"fullname\": \"exploit/multi/http/spree_searchlogic_exec\", \"is_install_path\": true, \"mod_time\": \"2025-10-06 17:15:11 +0000\", \"name\": \"Spreecommerce Arbitrary Command Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/multi/http/spree_searchlogic_exec.rb\", \"platform\": \"Linux,Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/http/spree_searchlogic_exec\", \"references\": [\"CVE-2011-10026\", \"OSVDB-71900\", \"URL-http://www.spreecommerce.com/blog/2011/04/19/security-fixes/\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Automatic\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:13.706793Z"}