Vulnerabilities

TI-2013-06073 CVE-2013-7418 · GHSA-4ggh-grjj-94pf

cgi-bin/iptablesgui.cgi in IPCop (aka IPCop Firewall) before 2.1.5 allows remote…

LOW 34

cgi-bin/iptablesgui.cgi in IPCop (aka IPCop Firewall) before 2.1.5 allows remote authenticated users to execute arbitrary code via shell metacharacters in the TABLE parameter.

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.02604 Published 2015-01-02 No fix listed CWE-77

TI-2013-06072 CVE-2013-7417 · GHSA-2xcj-m3jp-cgj9

Cross-site scripting (XSS) vulnerability in cgi-bin/ipinfo.cgi in IPCop (aka IPCop…

LOW 23

Cross-site scripting (XSS) vulnerability in cgi-bin/ipinfo.cgi in IPCop (aka IPCop Firewall) before 2.1.3 allows remote attackers to inject arbitrary web script or HTML via the QUERY_STRING.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01343 Published 2015-01-02 No fix listed CWE-79

TI-2005-04390 CVE-2005-4660 · GHSA-hc82-f9w8-5qqv

Race condition in IPCop (aka IPCop Firewall) before 1.4.10 might allow local users to…

LOW 7

Race condition in IPCop (aka IPCop Firewall) before 1.4.10 might allow local users to overwrite system configuration files and gain privileges by replacing a backup archive during the time window when the archive is owne…

CVSS 2.0LOW 1.2 Local No auth Interaction — EPSS 0.00295 Published 2006-01-16 No fix listed

TI-2005-04389 CVE-2005-4659 · GHSA-9m7h-2ggv-4q9j

IPCop (aka IPCop Firewall) before 1.4.10 has world-readable permissions for the…

LOW 11

IPCop (aka IPCop Firewall) before 1.4.10 has world-readable permissions for the backup.key file, which might allow local users to overwrite system configuration files and gain privileges by creating a malicious encrypted…

CVSS 2.0LOW 2.1 Local No auth Interaction — EPSS 0.00345 Published 2006-01-16 No fix listed

TI-2004-01103 CVE-2004-1210 · GHSA-g6wj-gf4p-jrxr

Cross-site scripting (XSS) vulnerability in proxylog.dat in IPCop 1.4.1 and possibly…