CVE-2005-4694

WebGUI

WebGUI < 6.7.6 Asset.pm Asset Addition Arbitrary Code Execution

The remote host is running WebGUI, a content management system from Plain Black Software. The installed version of WebGUI on the remote host fails to sanitize user-supplied input via the 'class' variable to various sources before using it to run commands. By leveraging this flaw, an attacker may ...