Evil-DB LogoEvil-DB
← All CVEs

CVE-2010-3719

high · 8.5

Eval injection vulnerability in IMAdminSchedTask.asp in the administrative interface for Symantec IM Manager 8.4.16 and earlier allows remote attackers to execute arbitrary code via unspecified parameters to the ScheduleTask method.

8.5
CVSS
13.0%
EPSS (exploit prob.)
96th
EPSS percentile
2011-02-02
Published

AV:N/AC:M/Au:S/C:C/I:C/A:C

Weaknesses

CWE-94

Affected products

VendorProductAffected versions
symantecim_manager<= 8.4.16
symantecim_manager6.0
symantecim_manager6.5
symantecim_manager7.0
symantecim_manager7.5
symantecim_manager8.3
symantecim_manager8.4.0
symantecim_manager8.4.1
symantecim_manager8.4.2
symantecim_manager8.4.5
symantecim_manager8.4.6
symantecim_manager8.4.7
symantecim_manager8.4.8
symantecim_manager8.4.9
symantecim_manager8.4.10
symantecim_manager8.4.11
symantecim_manager8.4.12
symantecim_manager8.4.13
symantecim_manager8.4.15

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2010-3719