CVE-2000-0923

Description

authenticate.cgi CGI program in Aplio PRO allows remote attackers to execute arbitrary commands via shell metacharacters in the password parameter.

Affected products

• aplio / aplio_phone2.0.33_build1 – 2.0.33_build1

References

• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/5333
• MISChttp://www.securityfocus.com/bid/1784
• MISChttp://archives.neohapsis.com/archives/bugtraq/2000-10/0107.html