critical10.0Public exploit code
CVE-2008-6826
dhtml.pl in MHF Media Pro allows remote attackers to execute arbitrary commands via shell metacharacters in the page parameter, as demonstrated using the (1) a…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Ads Pro - 'dhtml.pl' Remote Command Execution2008-10-26 · webapps · cgi · Verified
Impact
dhtml.pl in MHF Media Pro allows remote attackers to execute arbitrary commands via shell metacharacters in the page parameter, as demonstrated using the (1) advert_top.htm or (2) advert_login.htm pages.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mhfmedia | Ads Pro | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/49406
- http://secunia.com/advisories/32402
- http://www.securityfocus.com/bid/31923
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46121
- https://www.exploit-db.com/exploits/6845
- http://osvdb.org/49406
- http://secunia.com/advisories/32402
- http://www.securityfocus.com/bid/31923
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46121
- https://www.exploit-db.com/exploits/6845