CVEs-PoC/2013/CVE-2013-1875.md

CVE-2013-1875

Description

command_wrap.rb in the command_wrap Gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a URL or filename.

POC

Reference

• http://packetstormsecurity.com/files/120847/Ruby-Gem-Command-Wrap-Command-Execution.html
• http://packetstormsecurity.com/files/120847/Ruby-Gem-Command-Wrap-Command-Execution.html

Github

No PoCs found on GitHub currently.