CVE-2006-6454 - execInBackground.php in J-OWAMP Web Interface 2.1b and earlier allows remote attackers to execute arbitrary commands via shell metacharacters to the (1) exe and (2) args parameters, which are used in an exec function call

Back Back to CVE browser

HIGH

execInBackground.php in J-OWAMP Web Interface 2.1b and earlier allows remote attackers to execute arbitrary commands via shell metacharacters to the (1) exe and (2) args parameters, which are used in an exec function call

Published Dec 10, 2006

10.0

HIGH

CVSS 2.0

EPSS 2.69%

Description

execInBackground.php in J-OWAMP Web Interface 2.1b and earlier allows remote attackers to execute arbitrary commands via shell metacharacters to the (1) exe and (2) args parameters, which are used in an exec function call. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (3)

http://www.vupen.com/english/advisories/2006/4905
vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-6437
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/30781
vdb-entryx_refsource_XF

Link	Providers	Tags
http://www.vupen.com/english/advisories/2006/4905		vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-6437		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/30781		vdb-entryx_refsource_XF