Skip to content
OpenAdvisories

Package · RubyGems

echor

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.8
    CVE-2014-1835

    Echor Ruby Gem credentials can be stolen via process table monitoring

    The perform_request function in /lib/echor/backplane.rb in echor 0.1.6 Ruby Gem allows local users to steal the login credentials by watching the process table.

    echor RubyGems
  • High 7.8
    CVE-2014-1834

    Echor contains Command Injection

    The perform_request function in /lib/echor/backplane.rb in echor 0.1.6 Ruby Gem allows local users to inject arbitrary code by adding a semi-colon in their username or password.

    echor RubyGems