CVE-2008-7196

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

Unspecified vulnerability in metashell before 0.03 has unknown impact and attack vectors related to a "PATH execution security flaw," possibly an untrusted search path vulnerability.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

No affected versions have been published.

Timeline

Published
Sep 10, 2009
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2008

CVE-2008-719710.0Multiple unspecified vulnerabilities in G15Daemon before 1.9.4 have unknown impact and attack vectors.CVE-2008-719810.0Multiple unspecified vulnerabilities in phpns before 2.1.1beta1 have unknown impact and attack vectors.CVE-2008-71995.0Phoenix Contact FL IL 24 BK-PAC allows remote attackers to cause a denial of service (hang) via (1) unspecified manipulations as demonstrateCVE-2008-720010.0Double free vulnerability in Deliantra server engine before 2.4 has unknown impact and attack vectors.CVE-2008-72017.8Lantronix MSS485-T allows remote attackers to cause a denial of service (unstable performance and service loss) via certain vulnerability scCVE-2008-72024.3Multiple cross-site scripting (XSS) vulnerabilities in OpenWebMail before 2.53 (Stable) allow remote attackers to inject arbitrary web scripCVE-2008-72035.0Valve Software Half-Life Counter-Strike 1.6 allows remote attackers to cause a denial of service (crash) via multiple crafted login packets.CVE-2008-72046.8Cross-site request forgery (CSRF) vulnerability in VirtueMart 1.0.13a and earlier allows remote attackers to hijack the authentication of adCVE-2008-72054.3Unspecified vulnerability in the product view functionality in VirtueMart 1.0.13a and earlier allows remote attackers to read arbitrary fileCVE-2008-72064.3Unspecified vulnerability in Electronic Logbook (ELOG) before 2.7.2 has unknown impact and attack vectors when the "logbook contains HTML coCVE-2008-72072.1RivetTracker before 1.0 stores passwords in cleartext in config.php, which allows local users to discover passwords by reading config.php.CVE-2008-72086.8Multiple SQL injection vulnerabilities in OneCMS 2.4, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the
CVE-2008-7196: Critical severity, CVSS 10.0 | Vulnix