Nikto

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2018-11652 CRITICAL POC PATCH THREAT Act Now

CSV Injection vulnerability in Nikto 2.1.6 and earlier allows remote attackers to inject arbitrary OS commands via the Server field in an HTTP response header, which is directly injected into a CSV. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Code Injection Nikto

NVD GitHub Exploit-DB

CVSS 3.0

9.8

EPSS

24.7%

CVE-2018-11652

EPSS 25% CVSS 9.8

CRITICAL POC PATCH THREAT Act Now

CSV Injection vulnerability in Nikto 2.1.6 and earlier allows remote attackers to inject arbitrary OS commands via the Server field in an HTTP response header, which is directly injected into a CSV. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Code Injection Nikto

NVD GitHub Exploit-DB

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy