CVE-2012-1795

webglimpse.cgi in Webglimpse before 2.20.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the query parameter, as exploited in the wild in March 2012.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2012-03-20

Last modified

2024-08-06

Weaknesses

CWE-78

Affected products

• Webglimpse (Webglimpse)

References

• http://osvdb.org/80344
• http://secunia.com/advisories/48452
• http://www.kb.cert.org/vuls/id/364363
• http://www.securitytracker.com/id?1026825