← Database

CVE-2008-4318

CRITICAL CVSS: 10.0 Published: 2008-09-29 Modified: 2026-06-16

Description

Observer 0.3.2.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the query parameter to (1) whois.php or (2) netcmd.php.

Affected Platforms

Project-Observer Observer

Weakness Type

CWE-20

References