CVE-2008-4318

Observer 0.3.2.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the query parameter to (1) whois.php or (2) netcmd.php.

Link	Resource
http://securityreason.com/securityalert/4322
https://exchange.xforce.ibmcloud.com/vulnerabilities/45398
https://www.exploit-db.com/exploits/6559

Configuration 1

cpe:2.3:a:project-observer:observer:0.2.2:*:*:*:*:*:*:* cpe:2.3:a:project-observer:observer:0.2.5:*:*:*:*:*:*:* cpe:2.3:a:project-observer:observer:0.2.0:*:*:*:*:*:*:* cpe:2.3:a:project-observer:observer:0.30-pre-1:*:*:*:*:*:*:* cpe:2.3:a:project-observer:observer:0.3.2:*:*:*:*:*:*:* cpe:2.3:a:project-observer:observer:0.2.1:*:*:*:*:*:*:* cpe:2.3:a:project-observer:observer:0.2.4:*:*:*:*:*:*:* cpe:2.3:a:project-observer:observer:0.1.2:*:*:*:*:*:*:* cpe:2.3:a:project-observer:observer:*:*:*:*:*:*:*:* cpe:2.3:a:project-observer:observer:0.3.1:*:*:*:*:*:*:* cpe:2.3:a:project-observer:observer:0.1.1:*:*:*:*:*:*:* cpe:2.3:a:project-observer:observer:0.1.0:*:*:*:*:*:*:* cpe:2.3:a:project-observer:observer:0.2.3:*:*:*:*:*:*:*

---

Published : 2008-09-29 07:25

Updated : 2017-09-29 01:32

---

NVD link : CVE-2008-4318

Mitre link : CVE-2008-4318

No products.

CWE-20