Description
login.cgi in Community Link Pro Web Editor allows remote attackers to execute arbitrary commands via the file parameter.
References
- 1014345 vdb-entry
- http://www.badroot.org/advisories/SA0x05
- 15880 third-party-advisory
- 20050629 [badroot security] Community link pro web editor: Remote command mailing-list