VULNERABILITY INTELLIGENCE
CVE-2010-0934
CVSS score7.1 HIGH
EPSS probability2.00%
CISA KEVNot currently listed
Published2010-03-05
Last modified2026-06-16
CVSS vectorAV:N/AC:H/Au:S/C:C/I:C/A:C
Description
The triggers functionality in Perforce Server 2008.1 allows remote authenticated users with super privileges to execute arbitrary operating-system commands by using a "p4 client" command in conjunction with the form-in trigger script.
Weakness classification
- CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')