search.cgi in AGH HTMLsearch 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the template parameter.
Link | Tags |
---|---|
http://www.securiteam.com/securitynews/5WP0R2K60O.html | exploit |
http://www.securityfocus.com/bid/3985 | vdb entry exploit |
http://www.iss.net/security_center/static/8032.php | vdb entry |