CVE-2008-5810

N/A Unknown
Published: January 02, 2009 Modified: April 23, 2026
View on NVD

Description

WBPublish (aka WBPublish.exe) in Fujitsu-Siemens WebTransactions 7.0, 7.1, and possibly other versions allows remote attackers to execute arbitrary commands via shell metacharacters in input that is sent through HTTP and improperly used during temporary session data cleanup, possibly related to (1) directory names, (2) template names, and (3) session IDs.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://secunia.com/advisories/33168
Source: cve@mitre.org
Patch Vendor Advisory
http://bs2www.fujitsu-siemens.de/update/securitypatch.htm#english
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
http://secunia.com/advisories/33168
Source: af854a3a-2127-422b-91ae-364da2661108
Patch Vendor Advisory
http://securityreason.com/securityalert/4856
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/archive/1/499417/100/0/threaded
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/bid/32927
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securitytracker.com/id?1021475
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.vupen.com/english/advisories/2008/3462
Source: af854a3a-2127-422b-91ae-364da2661108
https://exchange.xforce.ibmcloud.com/vulnerabilities/47495
Source: af854a3a-2127-422b-91ae-364da2661108

18 reference(s) from NVD

Quick Stats

CVSS v3 Score
N/A / 10.0
EPSS (Exploit Probability)
3.7%
88th percentile
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)

Affected Vendors

fujitsu-siemens