CVE-2009-4646
Static code injection vulnerability in the administrative web interface in Accellion Secure File Transfer Appliance allows remote authenticated administrators to inject arbitrary shell commands by appending them to a request to update the SNMP public community string.
- Score
- CVSS 2.0 9.0 Critical
- Status
- Modified - cve@mitre.org
- Published
- 2010-02-19
- Last modified
- 2024-09-16
- Weaknesses
- CWE-94
Affected products
References
- http://secunia.com/advisories/38538
- http://www.portcullis-security.com/339.php
