Technote 2000/2001 'filename' Parameter Command Execution And File Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2156/info Technote Inc. offers a multi-communication Package that includes a web board type of service. A script that ships with Technote, 'main.cgi', accepts a parameter called 'filename'. This remotely supplied variable...