CVE-2013-7418: Improper Neutralization of Special Elements used in a Command

cgi-bin/iptablesgui.cgi in IPCop aka IPCop Firewall before 2.1.5 allows remote authenticated users to execute arbitrary code via shell metacharacters in the TABLE parameter. NOTE: this can be exploited remotely by leveraging a separate cross-site scripting XSS vulnerability...

PT-2015-3579

Name of the Vulnerable Software and Affected Versions IPCop aka IPCop Firewall versions prior to 2.1.5 Description The issue allows remote authenticated users to execute arbitrary code via shell metacharacters in the TABLE parameter of the "cgi-bin/iptablesgui.cgi" endpoint. This can be exploited...