CVE-2008-4873

board.cgi in Sepal SPBOARD 4.5 allows remote attackers to execute arbitrary commands via shell metacharacters in the file parameter during a downfile action...

CVE-2008-4873

The board.cgi component in Sepal SPBOARD 4.5 is vulnerable to remote command execution. An unauthenticated attacker can execute arbitrary commands by injecting shell metacharacters into the file parameter during a down_file action. Exploitation has been confirmed in the wild, with specific Proof ...