Description
The process_bug.cgi script in Bugzilla allows remote attackers to execute arbitrary commands via shell metacharacters.
References
- 1199 vdb-entry
- 20000510 Advisory: Unchecked system(blaat $var blaat) call in Bugzilla 2.8 mailing-list
Published Jul 12, 2000 · Updated Aug 8, 2024 · Assigned by mitre
The process_bug.cgi script in Bugzilla allows remote attackers to execute arbitrary commands via shell metacharacters.