dhtml.pl in MHF Media Pro allows remote attackers to execute arbitrary commands via shell metacharacters in the page parameter, as demonstrated using the (1) advert_top.htm or (2) advert_login.htm pages.
References
Configurations
History
No history.
Information
Published : 2009-06-08 19:30
Updated : 2025-04-09 00:30
NVD link : CVE-2008-6826
Mitre link : CVE-2008-6826
CVE.ORG link : CVE-2008-6826
JSON object : View
Products Affected
mhfmedia
- ads_pro
CWE
CWE-20
Improper Input Validation