Security Advisory

CVE-2013-7418

6.5

Vulnerability Description

cgi-bin/iptablesgui.cgi in IPCop (aka IPCop Firewall) before 2.1.5 allows remote authenticated users to execute arbitrary code via shell metacharacters in the TABLE parameter. NOTE: this can be exploited remotely by leveraging a separate cross-site scripting (XSS) vulnerability.
Published Date January 2, 2015
Official Source NIST NVD Advisory