CVE-2007-0246

2007-05-29T21:30:00
ID CVE-2007-0246
Type cve
Reporter cve@mitre.org
Modified 2017-07-29T01:30:00

Description

plugins/scmcvs/www/cvsweb.php in the CVSWeb CGI in GForge 4.5.16 before 20070524, aka gforge-plugin-scmcvs, allows remote attackers to execute arbitrary commands via shell metacharacters in the PATH_INFO.