{"uuid": "57a82f79-4435-40d4-97b7-262cfb7febbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2009-20010", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/dogfood_spell_exec.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"LSO \", \"aushack \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a previously unpublished vulnerability in the\\n          Dogfood CRM mail function which is vulnerable to command injection\\n          in the spell check feature.  Because of character restrictions, this\\n          exploit works best with the double-reverse telnet payload. This\\n          vulnerability was discovered by LSO and affects v2.0.10.\", \"disclosure_date\": \"2009-03-03\", \"fullname\": \"exploit/unix/webapp/dogfood_spell_exec\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:59:12 +0000\", \"name\": \"Dogfood CRM spell.php Remote Command Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/unix/webapp/dogfood_spell_exec.rb\", \"platform\": \"Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"unix/webapp/dogfood_spell_exec\", \"references\": [\"CVE-2009-20010\", \"OSVDB-54707\", \"URL-http://downloads.sourceforge.net/dogfood/\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Automatic\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:41.615571Z"}