NetSight
medium6.5

CVE-2006-0845

Leif M.

Impact

Leif M. Wright's Blog 3.5 allows remote authenticated users with administrative privileges to execute arbitrary programs, including shell commands, by configuring the sendmail path to a malicious pathname.

Affected products

VendorProductAffected versions
Leif M. WrightWeb Blog
Version 3.5

References