CVE-2014-0359

Xangati XSR before 11 and XNR before 7 allows remote attackers to execute arbitrary commands via shell metacharacters in a gui_input_test.pl params parameter to servlet/Installer.

Score

CVSS 2.0 9.0 Critical

Status

Modified - cret@cert.org

Published

2014-04-15

Last modified

2024-08-06

Weaknesses

CWE-78

Affected products

• Xangati Software Release (Xangati)
• Xangati Xnr (Xangati)

References

• http://www.kb.cert.org/vuls/id/657622