EUVD-2008-6786

Malware in sbrugna...

Code injection

dhtml.pl in MHF Media Pro allows remote attackers to execute arbitrary commands via shell metacharacters in the page parameter, as demonstrated using the 1 adverttop.htm or 2 advertlogin.htm pages...

CVE-2008-6826

dhtml.pl in MHF Media Pro allows remote attackers to execute arbitrary commands via shell metacharacters in the page parameter, as demonstrated using the 1 adverttop.htm or 2 advertlogin.htm pages...

CVE-2008-6826

CVE-2008-6826 affects MHF Media Pro’s dhtml.pl. The vulnerability enables remote command execution via shell metacharacters in the page parameter, demonstrated on the advert_top.htm and advert_login.htm pages. The CVSSv2 base score is 10.0 (HIGH) with network access, low attack complexity, no aut...

CVE-2008-6826

dhtml.pl in MHF Media Pro allows remote attackers to execute arbitrary commands via shell metacharacters in the page parameter, as demonstrated using the 1 adverttop.htm or 2 advertlogin.htm pages...

CVE-2008-6826: Improper Input Validation

dhtml.pl in MHF Media Pro allows remote attackers to execute arbitrary commands via shell metacharacters in the page parameter, as demonstrated using the 1 adverttop.htm or 2 advertlogin.htm pages...