Description
H-Sphere WebShell 2.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) mode and (2) zipfile parameters in a URL request.
References
- 1005893 vdb-entry
- 6539 vdb-entry
- 6537 vdb-entry
- http://psoft.net/misc/webshell_patch.html
- hsphere-webshell-encodefilename-execution(11001) vdb-entry
- 20030106 Remote root vuln in HSphere WebShell mailing-list