Shellinabox
Approved changes feed: RSS · Atom
cpe:2.3:a:shellinabox_project:shellinabox:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Shellinabox Project (32da1616-db40-55bb-b144-9c20ba6c4adc) |
|---|---|
| Product | Shellinabox (dbaf6ae8-c8d7-5c7a-a405-13f3c6a08748) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:bitbucket/nwilli/shellinabox |
purl2cpe | 2026-06-01 10:11:12.328155 |
pkg:deb/debian/shellinabox |
purl2cpe | 2026-06-01 10:11:12.328157 |
pkg:deb/ubuntu/shellinabox |
purl2cpe | 2026-06-01 10:11:12.328160 |
pkg:github/shellinabox/shellinabox |
purl2cpe | 2026-06-01 10:11:12.328163 |
pkg:rpm/fedora/shellinabox |
purl2cpe | 2026-06-01 10:11:12.328166 |
pkg:rpm/opensuse/shellinabox |
purl2cpe | 2026-06-01 10:11:12.328168 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-16789 |
vulnerable | 2026-06-08 05:11:05.484866 |
Details available
libhttp/url.c in shellinabox through 2.20 has an implementation flaw in the HTTP request parsing logic. By sending a crafted multipart/form-data HTTP request, an attacker could exploit this to force shellinaboxd into an infinite loop, exhausting available CPU resources and taking the service down.
Published: 2019-03-17T18:36:51.000Z
Updated: 2024-08-05T10:32:53.996Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-8400 |
vulnerable | 2026-06-08 05:07:03.917064 |
Details available
The HTTPS fallback implementation in Shell In A Box (aka shellinabox) before 2.19 makes it easier for remote attackers to conduct DNS rebinding attacks via the "/plain" URL.
Published: 2016-01-12T19:00:00.000Z
Updated: 2024-08-06T08:13:32.892Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.