CVE-2018-1000666

GIG Technology NV JumpScale Portal 7 version before commit 15443122ed2b1cbfd7bdefc048bf106f075becdb contains a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in method: notifySpaceModification; that can result in Improper validation of parameters results in command execution. This attack appear to be exploitable via Network connectivity, required minimal auth privileges (everyone can register an account). This vulnerability appears to have been fixed in After commit 15443122ed2b1cbfd7bdefc048bf106f075becdb.

• CWE-78

• https://github.com/0-complexity/openvcloud/issues/1207Exploit, Issue Tracking, Third Party Advisory
• https://github.com/jumpscale7/jumpscale_portal/blob/c997bb1824862b08246d60e34e950df06ebac68c/apps/portalbase/system/system__contentmanager/methodclass/system_contentmanager.py#L293-L315Exploit, Third Party Advisory
• https://github.com/jumpscale7/jumpscale_portal/pull/108Broken Link
• https://medium.com/%40vrico315/vulnerability-in-jumpscale-portal-7-a88098a1caca
• https://telegra.ph/Description-of-vulnerability-in-JumpScale-Portal-7-08-23Exploit, Third Party Advisory
• https://github.com/0-complexity/openvcloud/issues/1207Exploit, Issue Tracking, Third Party Advisory
• https://github.com/jumpscale7/jumpscale_portal/blob/c997bb1824862b08246d60e34e950df06ebac68c/apps/portalbase/system/system__contentmanager/methodclass/system_contentmanager.py#L293-L315Exploit, Third Party Advisory
• https://github.com/jumpscale7/jumpscale_portal/pull/108Broken Link
• https://medium.com/%40vrico315/vulnerability-in-jumpscale-portal-7-a88098a1caca
• https://telegra.ph/Description-of-vulnerability-in-JumpScale-Portal-7-08-23Exploit, Third Party Advisory

Published

Sep 6, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-1000660TOCK version prior to commit 42f7f36e74088036068d62253e1d8fb…
• CVE-2018-1000661jsish version 2.4.67 contains a CWE-476: NULL Pointer Derefe…
• CVE-2018-1000662Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2018-1000663jsish version 2.4.70 2.047 contains a Buffer Overflow vulner…
• CVE-2018-1000664daneren2005 DSub for Subsonic (Android client) version 5.4.1…
• CVE-2018-1000665Dojo Dojo Objective Harness (DOH) version prior to version 1…
• CVE-2018-1000667NASM nasm-2.13.03 nasm- 2.14rc15 version 2.14rc15 and earlie…
• CVE-2018-1000668jsish version 2.4.70 2.047 contains a CWE-125: Out-of-bounds…
• CVE-2018-1000669KOHA Library System version 16.11.x (up until 16.11.13) and …
• CVE-2018-1000670KOHA Library System version 16.11.x (up until 16.11.13) and …
• CVE-2018-1000671sympa version 6.2.16 and later contains a CWE-601: URL Redir…
• CVE-2018-1000672Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…