{"vulnerability": "CVE-2013-10039", "sightings": [{"uuid": "205c95a3-a734-4a41-92a1-9f4f83a931ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10039", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:12:57.000000Z"}, {"uuid": "11d56465-82eb-4271-a85c-b4ed4f9d4a40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10039", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/gestioip_exec.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "257676a7-3e8a-4445-bb12-33429494535d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10039", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/gestioip_exec.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"bperry\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a command injection flaw to create a shell script\\n          on the filesystem and execute it. If GestioIP is configured to use no authentication,\\n          no password is required to exploit the vulnerability. Otherwise, an authenticated\\n          user is required to exploit.\", \"disclosure_date\": \"2013-10-04\", \"fullname\": \"exploit/multi/http/gestioip_exec\", \"is_install_path\": true, \"mod_time\": \"2025-10-06 17:15:11 +0000\", \"name\": \"GestioIP Remote Command Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/multi/http/gestioip_exec.rb\", \"platform\": \"Unix\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"multi/http/gestioip_exec\", \"references\": [\"CVE-2013-10039\", \"URL-http://sourceforge.net/p/gestioip/gestioip/ci/ac67be9fce5ee4c0438d27dfa5c1dcbca08c457c/\", \"URL-https://github.com/rapid7/metasploit-framework/pull/2461\", \"URL-https://www.rapid7.com/blog/post/2013/10/03/gestioip-authenticated-remote-command-execution-module\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Automatic GestioIP 3.0\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:47.629877Z"}]}