CVE-2011-10017Disclosure

LOWCVSS 10.0 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Snort Report versions < 1.3.2 contains a remote command execution vulnerability in the nmap.php and nbtscan.php scripts. These scripts fail to properly sanitize user input passed via the target GET parameter, allowing attackers to inject arbitrary shell commands. Exploitation requires no authentication and can result in full compromise of the underlying system.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-78

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

1 mentions across 1 observed day

What's happening

Technical details provided in 1 signal
Disclosure: 1 classified signal
1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Disclosure

1100.0%

Referenced assets1 URL

By indicator

https://zerodaysignal.com/vulnerability/CVE-2011-10017

Full discourse1 post

0day Signal@0dayPublishing184d
Disclosure
🚨 CVE-2011-10017: Snort Report nmap.php/nbtscan.ph... GET parameter injection in legacy Snort Report turns network monitoring into instant root shells - perfect CVSS 10.0 wi... https://zerodaysignal.com/vulnerability/CVE-2011-10017 #netsec #vulnerability #CVE #sysadmin #zeroday
Post summary
The tweet is an announcement of CVE‑2011‑10017, describing a GET parameter injection in legacy Snort Report that can yield root shells, with a CVSS of 10.0. No patch, PoC, or exploitation evidence is provided.
0000031
204 followersView on X

Explore more

Back to dashboard