RCE in Dirk Bartley Nweb2fax
CVE-2008-6669
viewrq.php in nweb2fax 0.2.7 and earlier allows remote attackers to execute arbitrary code via shell metacharacters in the var_filename parameter in a (1) tif or (2) pdf format action.
Vulnerability class: Command Injection (OS Command Injection)
EPSS: 0.042 (90.0th percentile) — read the EPSS interpretation.
Affected products
- Dirk_bartley Nweb2fax — versions 0.1, 0.2, 0.2.1
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (exploit, x_refsource_EXPLOIT-DB)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (vdb-entry, x_refsource_XF)