high7.5Public exploit code
CVE-2008-6669
viewrq.php in nweb2fax 0.2.7 and earlier allows remote attackers to execute arbitrary code via shell metacharacters in the var_filename parameter in a (1) tif …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- nweb2fax 0.2.7 - Multiple Vulnerabilities2008-06-18 · webapps · php · Verified
Impact
viewrq.php in nweb2fax 0.2.7 and earlier allows remote attackers to execute arbitrary code via shell metacharacters in the var_filename parameter in a (1) tif or (2) pdf format action.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dirk Bartley | Nweb2fax | through 0.2.7 Versions 0.1, 0.2, 0.2.1, 0.2.4, 0.2.5 |