Webglimpse

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2012-1795 HIGH POC PATCH This Week

webglimpse.cgi in Webglimpse before 2.20.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the query parameter, as exploited in the wild in March 2012. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

Command Injection Webglimpse

NVD

CVSS 2.0

7.5

EPSS

1.1%

CVE-2012-1787 MEDIUM POC This Month

Multiple cross-site scripting (XSS) vulnerabilities in wgarcmin.cgi in Webglimpse 2.20.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) URL, (2) FILE, or (3). Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

XSS Webglimpse

NVD Exploit-DB

CVSS 2.0

4.3

EPSS

4.5%

CVE-2012-1795

EPSS 1% CVSS 7.5

HIGH POC PATCH This Week

Command Injection Webglimpse

NVD

CVE-2012-1787

EPSS 5% CVSS 4.3

MEDIUM POC This Month

XSS Webglimpse

NVD Exploit-DB