Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2011-0456

EPSS 3.04% · P87
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2011-0456

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
webscript.pl in Open Ticket Request System (OTRS) 2.3.4 and earlier allows remote attackers to execute arbitrary commands via unspecified vectors, related to a "command injection vulnerability."
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
OTRS webscript.pl命令注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Open Ticket Request System(OTRS)是德国OTRS集团的一套开源缺陷跟踪管理系统软件。该软件将电话,邮件等各种渠道提交进来的服务请求归类为不同的队列、服务级别,服务人员通过OTRS系统来跟踪和回复客户。 Open Ticket Request System(OTRS)2.3.4及之前版本的webscript.pl中存在操作系统命令注入漏洞。远程攻击者可以借助未明向量执行任意命令。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2011-0456

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2011-0456

登录查看更多情报信息。

Same Patch Batch · n/a · 2011-03-11 · 42 CVEs total

CVE-2011-0159Apple iOS Safari Settings功能用户追踪漏洞
CVE-2011-1286Google Chrome V8无效内存访问漏洞
CVE-2011-1413Google Chrome拒绝服务漏洞
CVE-2010-3609VMware多个产品SLPD OpenSLP拒绝服务漏洞
CVE-2011-1137ProFTPD mod_sftp模块整数溢出漏洞
CVE-2011-1416Research In Motion BlackBerry Torch内存内容读取漏洞
CVE-2011-1417Apple iOS MobileSafari OfficeArtBlip解析整数溢出漏洞
CVE-2011-1290WebKit 数字错误漏洞
CVE-2010-4651GNU patch util.c目录遍历漏洞
CVE-2011-0157Apple iOS WebKit任意代码执行漏洞
CVE-2011-0158Apple iOS MobileSafari拒绝服务漏洞
CVE-2011-1285Google Chrome正则表达式功能缓冲区错误漏洞
CVE-2011-0160Apple Safari和iOS WebKit信息泄露漏洞
CVE-2011-0161Apple Safari和iOS WebKit同源策略绕过和CSS令牌序列注入漏洞
CVE-2011-0162Apple iOS和TV Wi-Fi拒绝服务漏洞
CVE-2011-0163Apple Safari和iOS WebKit拒绝服务漏洞
CVE-2011-0166Apple Safari WebKit HTML5拖放功能同源策略绕过和敏感信息泄露漏洞
CVE-2011-0167Apple Safari WebKit windows功能同源策略绕过和任意本地文件上传漏洞
CVE-2011-0169Apple Safari WebKit同源策略绕过和跨站脚本攻击漏洞
CVE-2011-0715Apache HTTP服务器'mod_dav_svn'模块空指针引用漏洞

Showing top 20 of 42 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2011-0456

No comments yet


Leave a comment