{"api_version":"1","generated_at":"2026-07-23T12:21:32+00:00","cve":"CVE-2008-5810","urls":{"html":"https://cve.report/CVE-2008-5810","api":"https://cve.report/api/cve/CVE-2008-5810.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2008-5810","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2008-5810"},"summary":{"title":"CVE-2008-5810","description":"WBPublish (aka WBPublish.exe) in Fujitsu-Siemens WebTransactions 7.0, 7.1, and possibly other versions allows remote attackers to execute arbitrary commands via shell metacharacters in input that is sent through HTTP and improperly used during temporary session data cleanup, possibly related to (1) directory names, (2) template names, and (3) session IDs.","state":"PUBLISHED","assigner":"mitre","published_at":"2009-01-02 18:11:09","updated_at":"2026-04-23 00:35:47"},"problem_types":["CWE-20","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"10","severity":"","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"}}],"references":[{"url":"http://bs2www.fujitsu-siemens.de/update/securitypatch.htm#english","name":"http://bs2www.fujitsu-siemens.de/update/securitypatch.htm#english","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"♫ Songtexte.de - Kostenlose Songtexte, Lyrics & Übersetzungen","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2008/3462","name":"http://www.vupen.com/english/advisories/2008/3462","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.sec-consult.com/files/20081219-0_fujitsu-siemens_webta_cmdexec.txt","name":"http://www.sec-consult.com/files/20081219-0_fujitsu-siemens_webta_cmdexec.txt","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"404 - Page not found! - SEC Consult","mime":"text/plain","httpstatus":"404","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/32927","name":"http://www.securityfocus.com/bid/32927","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Fujitsu-Siemens WebTransactions Unspecified Remote Command Execution Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://securityreason.com/securityalert/4856","name":"http://securityreason.com/securityalert/4856","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Fujitsu-Siemens WebTransactions Remote Command - CXSecurity.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/499417/100/0/threaded","name":"http://www.securityfocus.com/archive/1/499417/100/0/threaded","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47495","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47495","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/33168","name":"http://secunia.com/advisories/33168","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"Fujitsu-Siemens WebTransactions Command Injection Vulnerability - Secunia Advisories - Vulnerability Intelligence - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securitytracker.com/id?1021475","name":"http://www.securitytracker.com/id?1021475","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Fujitsu-Siemens WebTransactions Input Validation Flaw Lets Remote Users Execute Arbitrary Commands - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-5810","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-5810","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2008","cve_id":"5810","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fujitsu-siemens","cpe5":"webtransactions","cpe6":"7.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"5810","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fujitsu-siemens","cpe5":"webtransactions","cpe6":"7.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T11:04:44.582Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.sec-consult.com/files/20081219-0_fujitsu-siemens_webta_cmdexec.txt"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://bs2www.fujitsu-siemens.de/update/securitypatch.htm#english"},{"name":"webtransactions-wbpublish-command-injection(47495)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47495"},{"name":"1021475","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://www.securitytracker.com/id?1021475"},{"name":"4856","tags":["third-party-advisory","x_refsource_SREASON","x_transferred"],"url":"http://securityreason.com/securityalert/4856"},{"name":"ADV-2008-3462","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2008/3462"},{"name":"32927","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/32927"},{"name":"20081219 SEC Consult SA-20081219-0 :: Fujitsu-Siemens WebTransactionsremote command injection vulnerability","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/499417/100/0/threaded"},{"name":"33168","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/33168"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2008-12-19T00:00:00.000Z","descriptions":[{"lang":"en","value":"WBPublish (aka WBPublish.exe) in Fujitsu-Siemens WebTransactions 7.0, 7.1, and possibly other versions allows remote attackers to execute arbitrary commands via shell metacharacters in input that is sent through HTTP and improperly used during temporary session data cleanup, possibly related to (1) directory names, (2) template names, and (3) session IDs."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2018-10-11T19:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"tags":["x_refsource_MISC"],"url":"http://www.sec-consult.com/files/20081219-0_fujitsu-siemens_webta_cmdexec.txt"},{"tags":["x_refsource_CONFIRM"],"url":"http://bs2www.fujitsu-siemens.de/update/securitypatch.htm#english"},{"name":"webtransactions-wbpublish-command-injection(47495)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47495"},{"name":"1021475","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://www.securitytracker.com/id?1021475"},{"name":"4856","tags":["third-party-advisory","x_refsource_SREASON"],"url":"http://securityreason.com/securityalert/4856"},{"name":"ADV-2008-3462","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2008/3462"},{"name":"32927","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/32927"},{"name":"20081219 SEC Consult SA-20081219-0 :: Fujitsu-Siemens WebTransactionsremote command injection vulnerability","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/499417/100/0/threaded"},{"name":"33168","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/33168"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2008-5810","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"WBPublish (aka WBPublish.exe) in Fujitsu-Siemens WebTransactions 7.0, 7.1, and possibly other versions allows remote attackers to execute arbitrary commands via shell metacharacters in input that is sent through HTTP and improperly used during temporary session data cleanup, possibly related to (1) directory names, (2) template names, and (3) session IDs."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"http://www.sec-consult.com/files/20081219-0_fujitsu-siemens_webta_cmdexec.txt","refsource":"MISC","url":"http://www.sec-consult.com/files/20081219-0_fujitsu-siemens_webta_cmdexec.txt"},{"name":"http://bs2www.fujitsu-siemens.de/update/securitypatch.htm#english","refsource":"CONFIRM","url":"http://bs2www.fujitsu-siemens.de/update/securitypatch.htm#english"},{"name":"webtransactions-wbpublish-command-injection(47495)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47495"},{"name":"1021475","refsource":"SECTRACK","url":"http://www.securitytracker.com/id?1021475"},{"name":"4856","refsource":"SREASON","url":"http://securityreason.com/securityalert/4856"},{"name":"ADV-2008-3462","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2008/3462"},{"name":"32927","refsource":"BID","url":"http://www.securityfocus.com/bid/32927"},{"name":"20081219 SEC Consult SA-20081219-0 :: Fujitsu-Siemens WebTransactionsremote command injection vulnerability","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/499417/100/0/threaded"},{"name":"33168","refsource":"SECUNIA","url":"http://secunia.com/advisories/33168"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2008-5810","datePublished":"2009-01-02T18:00:00.000Z","dateReserved":"2009-01-02T00:00:00.000Z","dateUpdated":"2024-08-07T11:04:44.582Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2009-01-02 18:11:09","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["CWE-20","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10,"impactScore":10,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu-siemens:webtransactions:7.0:*:*:*:*:*:*:*","matchCriteriaId":"A8A90885-F8E8-4628-8E6B-F5285D61C4C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu-siemens:webtransactions:7.1:*:*:*:*:*:*:*","matchCriteriaId":"C51DF200-6C78-4DEC-8D33-CFEA8FD42CAF"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2008","CveId":"5810","Ordinal":"1","Title":"CVE-2008-5810","CVE":"CVE-2008-5810","Year":"2008"},"notes":[{"CveYear":"2008","CveId":"5810","Ordinal":"1","NoteData":"WBPublish (aka WBPublish.exe) in Fujitsu-Siemens WebTransactions 7.0, 7.1, and possibly other versions allows remote attackers to execute arbitrary commands via shell metacharacters in input that is sent through HTTP and improperly used during temporary session data cleanup, possibly related to (1) directory names, (2) template names, and (3) session IDs.","Type":"Description","Title":"CVE-2008-5810"},{"CveYear":"2008","CveId":"5810","Ordinal":"2","NoteData":"2009-01-02","Type":"Other","Title":"Published"},{"CveYear":"2008","CveId":"5810","Ordinal":"3","NoteData":"2018-10-11","Type":"Other","Title":"Modified"}]}}}