CVEvulnerability

CVE-2008-4318

10.0 HIGH Published 2008-09-29 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2008-09-29
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-20

Description

Observer 0.3.2.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the query parameter to (1) whois.php or (2) netcmd.php.

Affected configurations

• project-observer observer (<= 0.3.2.1) • project-observer observer 0.1.0 • project-observer observer 0.1.1 • project-observer observer 0.1.2 • project-observer observer 0.2.0 • project-observer observer 0.2.1 • project-observer observer 0.2.2 • project-observer observer 0.2.3 • project-observer observer 0.2.4 • project-observer observer 0.2.5 • project-observer observer 0.3.1 • project-observer observer 0.3.2 • project-observer observer 0.30-pre-1

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References