CVE-2013-10039: Gestioip Ipam

High severity, CVSS 8.7. EPSS: 4.7% chance of exploitation in the next 30 days.

A command injection vulnerability exists in GestioIP 3.0 commit ac67be and earlier in ip_checkhost.cgi. Crafted input to the 'ip' parameter allows attackers to execute arbitrary shell commands on the server via embedded base64-encoded payloads. Authentication may be required depending on deployment configuration.

Affected products

• Gestioip Ipam: before 3.0 commit ac67be (fixed in 3.0 commit ac67be)

Published 2025-07-31. Last modified 2026-06-16.