CVE-2006-7012

scart.cgi in SCart 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the page parameter of a show_text action.

Score

CVSS 2.0 10.0 Critical

Status

Modified - cve@mitre.org

Published

2007-02-15

Last modified

2024-08-07

Affected products

• Scart (Scart)

References

• http://advisories.echo.or.id/adv/adv32-K-159-2006.txt
• http://securityreason.com/securityalert/2257
• http://www.securityfocus.com/archive/1/435861/30/4710/threaded
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26921
• https://www.exploit-db.com/exploits/1876