Description
The Menu Manager Mod for (1) web-app.net WebAPP (aka WebAPP NE) 0.9.9.3.3 through 0.9.9.8, and (2) web-app.org WebAPP before 0.9.9.6, allows remote authenticated users to execute arbitrary commands via shell metacharacters in the titles of items in a personal menu.
References
- http://www.web-app.net/cgi-bin/index.cgi?action=downloadinfo&cat=security&id=3
- 24453 vdb-entry
- 20070627 Web-APP.org feedback on CVE-2007-3242 mailing-list
- 20070612 Menu Manager Mod for WebAPP - No Input Filtering mailing-list
- 20070618 Re: Menu Manager Mod for WebAPP - No Input Filtering mailing-list
- webapp-menu-command-execution(34845) vdb-entry