Description
Avi Alkalay man-cgi script allows remote attackers to execute arbitrary code via shell metacharacters in the topic parameter.
Affected products
References
- VENDOR_ADVISORYhttp://secunia.com/advisories/16887
- VENDOR_ADVISORYhttp://www.cirt.net/advisories/alkalay.shtml
- MISChttp://www.alkalay.net/software
- MISChttp://www.securityfocus.com/bid/14893
- MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/22351
- VENDOR_ADVISORYhttp://www.vupen.com/english/advisories/2005/1809
- MISChttp://www.osvdb.org/19519