CVE-2012-1795

CVE-2012-1795

EPSS 4.2%

webglimpse.cgi in Webglimpse before 2.20.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the query parameter, as exploited in the wild in March 2012.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/80344 http://secunia.com/advisories/48452 http://www.kb.cert.org/vuls/id/364363 http://www.securitytracker.com/id?1026825