Attributed metadata history
Up to 100 retained publisher events per page for CVE-2011-10019. Withdrawals and unavailable references remain attributed to their publishers.
nvd
observed · 2026-10-12 08:23:03 UTC
Spreecommerce versions prior to 0.60.2 contains a remote command execution vulnerability in its search functionality. The application fails to properly sanitize input passed via the search[send][] parameter, which is dynamically invoked using Ruby’s send method. This allows attackers to execute arbitrary shell commands on the server without authentication.
Fingerprint: 714e7c6850a5d2d1814277979c94972e014c0e17fc8ecfac6c32573d025c8a73
nvd
available · 2026-10-12 04:02:58 UTC
available
Fingerprint: 1a480b1c570dfec82c1cc39b732387360c17935637e0981c7b0fd9c8798dc341