CVE-2007-6459

2007-12-2000:00:00

mitre

www.cve.org

7.6 High

AI Score

Confidence

Low

0.054 Low

EPSS

Percentile

93.2%

JSON

Anon Proxy Server 0.100, and probably 0.101, allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the host parameter to diagdns.php, and (2) the host parameter and possibly (3) the port parameter to diagconnect.php, a different vulnerability than CVE-2007-6460.

References

osvdb.org/43711

osvdb.org/43712

securityreason.com/securityalert/3463

www.securityfocus.com/archive/1/485151/100/0/threaded

www.securityfocus.com/bid/26882

www.exploit-db.com/exploits/4734