Vendor
ZEN Load Balancer
1 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Critical 9.4CVE-2012-10039 Public exploit
ZEN Load Balancer Filelog Command Execution
ZEN Load Balancer versions 2.0 and 3.0-rc1 contain a command injection vulnerability in content2-2.cgi. The filelog parameter is passed directly into a backtick-delimited exec() call without sanitation. An authenticated attacker can inject arbitrary shell com…