Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

Leif M. Wright Web Blog Remote Command Execution Vulnerability

Web Blog has been reported to be prone to a vulnerability that may permit remote attackers to execute arbitrary commands in the context of the hosting web server. This is due to insufficient sanitization of shell metacharacters from variables which will be used as an argument to a function that invokes the shell directly.







 

Privacy Statement
Copyright 2009, SecurityFocus