Description
viralator CGI script in Viralator 0.9pre1 and earlier allows remote attackers to execute arbitrary code via a URL for a file being downloaded, which is insecurely passed to a call to wget.
References
- 20011101 Vulnerability in Viralator proxy extension mailing-list
- viralator-cgi-command-execution(7440) vdb-entry
- 3495 vdb-entry
- http://viralator.loddington.com/changes.html