Vulnerability in Y.sak

CVE-2005-2334

Y.SAK allows remote attackers to execute arbitrary commands via shell metacharacters in the $no variable to (1) w_s3mbfm.cgi, (2) w_s3adix.cgi, or (3) w_s3sbfm.cgi.

EPSS: 0.027 (84.6th percentile) — read the EPSS interpretation.

Affected products

  • Y.sak
  • N/a — versions n/a

References