GCVE-110-CERTCC-2004-770816

Advisory Published

Vulnetix · Advisory published August 9, 2004

CVSTrac fails to check the validity of input passed to the "rcsinfo" parameter of "filediff." This allows execution of arbitrary commands on the server.

Download JSON Open in Console

Risk Scores

certcc-cam

impact15population10exploitation0widely_known20score_current16.875ease_of_exploitation20

References

CVSTrac fails to properly sanitize input passed to "filediff"

url

CVSTrac fails to properly sanitize input passed to "filediff"

url

CVSTrac fails to properly sanitize input passed to "filediff"

url

CVSTrac fails to properly sanitize input passed to "filediff"

url

CVSTrac fails to properly sanitize input passed to "filediff"

url

CVSTrac fails to properly sanitize input passed to "filediff"

url

CVSTrac fails to properly sanitize input passed to "filediff"

url

CVSTrac fails to properly sanitize input passed to "filediff"

url

CVSTrac fails to properly sanitize input passed to "filediff"

advisory

Browse GCVE Records

73,161 records in the GCVE database · Updated July 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON