CVE-2011-10019

high-risk
Published 2025-08-13

Spreecommerce versions prior to 0.60.2 contains a remote command execution vulnerability in its search functionality. The application fails to properly sanitize input passed via the search[send][] parameter, which is dynamically invoked using Ruby’s send method. This allows attackers to execute arbitrary shell commands on the server without authentication.

Do I need to act?

!
69.3% chance of exploitation in next 30 days
EPSS score — higher than 31% of all CVEs
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
9
CVSS 9.8/10 Critical
NETWORK / LOW complexity

Affected Products (1)

Affected Vendors

Spreecommerce

References (5)

Product https://github.com/orgs/spree
Exploit https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exp...
Release Notes https://web.archive.org/web/20111009192436/http://spreecommerce.com/blog/2011/10...
Exploit https://www.exploit-db.com/exploits/17941
Third Party Advisory https://www.vulncheck.com/advisories/spreecommerce-search-parameter-rce
56
/ 100
high-risk
Severity 32/34 · Critical
Exploitability 19/34 · Moderate
Exposure 5/34 · Minimal