Description
manual.php in Marcus S. Xenakis Unix Manual 1.0 allows remote attackers to execute arbitrary code via a URL that contains shell metacharacters.
References
- unixmanual-php-command-execution(7719) vdb-entry
- VU#672419 third-party-advisory
- 3718 vdb-entry
- 20011215 *ALERT* "Unix Manual" PHP-Script allows arbitrary code execution mailing-list