CVE-2014-5470

critical · 9.8

Actual Analyzer through 2014-08-29 allows code execution via shell metacharacters because untrusted input is used for part of the input data passed to an eval operation.

9.8

CVSS

10.0%

EPSS (exploit prob.)

95th

EPSS percentile

2024-06-21

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-77

References

https://vulmon.com/exploitdetails?qidtp=exploitdb&qid=35549
https://www.exploit-db.com/exploits/35549
https://vulmon.com/exploitdetails?qidtp=exploitdb&qid=35549
https://www.exploit-db.com/exploits/35549

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2014-5470