NetSight
high7.5

CVE-2012-1795

webglimpse.cgi in Webglimpse before 2.20.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the query parameter, as exploited …

Impact

webglimpse.cgi in Webglimpse before 2.20.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the query parameter, as exploited in the wild in March 2012.

Affected products

VendorProductAffected versions
WebglimpseWebglimpse
through 2.18.8
Versions 2.2.0, 2.2.1, 2.2.2, 2.3.1, 2.3.3

Weakness classification

References