← Database

CVE-2008-6826

CRITICAL CVSS: 10.0 Published: 2009-06-08 Modified: 2026-06-16

Description

dhtml.pl in MHF Media Pro allows remote attackers to execute arbitrary commands via shell metacharacters in the page parameter, as demonstrated using the (1) advert_top.htm or (2) advert_login.htm pages.

Affected Platforms

Mhfmedia Ads Pro

Weakness Type

CWE-20

References