VULNERABILITY INTELLIGENCE
CVE-2008-7313
CVSS score9.8 CRITICAL
EPSS probability4.54%
CISA KEVNot currently listed
Published2017-03-31
Last modified2026-06-16
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
The _httpsrequest function in Snoopy allows remote attackers to execute arbitrary commands. NOTE: this issue exists dues to an incomplete fix for CVE-2008-4796.
Weakness classification
- CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')
Primary references
- cve@mitre.org — Patch, Third Party Advisory
- cve@mitre.org — Mailing List, Patch, Third Party Advisory
- cve@mitre.org — Mailing List, Patch, Third Party Advisory
- cve@mitre.org — Mailing List, Patch, Third Party Advisory
- cve@mitre.org — Third Party Advisory, VDB Entry
- cve@mitre.org — Issue Tracking, Patch
- cve@mitre.org — Third Party Advisory, VDB Entry
- cve@mitre.org — Patch, Third Party Advisory
- cve@mitre.org — Patch, Third Party Advisory
- cve@mitre.org — Patch, Third Party Advisory
- cve@mitre.org — Patch, Third Party Advisory
- cve@mitre.org — Patch, Third Party Advisory, VDB Entry