Description
wps_shop.cgi in WPS Web Portal System 0.7.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) art and (2) cat variables.
References
- 1014480 vdb-entry
- 20050713 WPS Web-Portal-System v.0.7.0 (wps_shop.cgi) remote commands mailing-list
- 15780 third-party-advisory
- 14245 vdb-entry