critical9.8
CVE-2017-16926
Ohcount 3.0.0 is prone to a command injection via specially crafted filenames containing shell metacharacters, which can be exploited by an attacker (providing…
Impact
Ohcount 3.0.0 is prone to a command injection via specially crafted filenames containing shell metacharacters, which can be exploited by an attacker (providing a source tree for Ohcount processing) to execute arbitrary code as the user running Ohcount.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ohcount Project | Ohcount | Version 3.0.0 |