← Database

CVE-2009-2288

HIGH CVSS: 7.5 Published: 2009-07-01 Modified: 2026-06-16

Description

statuswml.cgi in Nagios before 3.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) ping or (2) Traceroute parameters.

Affected Platforms

Nagios Nagios

Weakness Type

CWE-78

References