CVE-2004-2732

Published: Dec 31, 2004Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

nbmember.cgi in Netbilling 2.0 allows remote attackers to obtain sensitive information via the cmd=test option, which can be leveraged to determine the access key.

Affected (1)

Products: Netbilling: Netbilling

Netbilling

1 product

Netbilling

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Netbilling Netbilling	Version 2.0

Related CWEs

CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

References (10)

http://securitytracker.com/id?1011881

Source: cve@mitre.org

http://web.archive.org/web/20041106200147/http://www.it-helpnet.de/bugless/bugs.php?mode=show&id=8&SID=

Source: cve@mitre.org

http://www.osvdb.org/10902

Source: cve@mitre.org

http://www.securityfocus.com/bid/11504

Source: cve@mitre.org

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/17865

Source: cve@mitre.org

http://securitytracker.com/id?1011881