← Database

CVE-2007-6176

CRITICAL CVSS: 10.0 Published: 2007-11-30 Modified: 2026-06-16

Description

kb_whois.cgi in K+B-Bestellsystem (aka KB-Bestellsystem) allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) domain or (2) tld parameter in a check_owner action.

Affected Platforms

Amensa-Soft K\+B-Bestellsystem

Weakness Type

CWE-20

References