• info
• discussion
• exploit
• solution
• references

Nikki HP no Mawashimono Unspecified Command Injection Vulnerability

Nikki is prone to a command-injection vulnerability because it fails to adequately sanitize user-supplied input.

Attackers can exploit this issue to execute arbitrary commands in the context of the webserver process. Successful exploits could compromise the application and possibly the underlying system.

Nikki 6.6 and prior versions are vulnerable.