WebGlimpse query Parameter Command Injection

The version of WebGlimpse installed on the remote host does not sufficiently sanitize user input to the 'query' parameter of the 'webglimpse.cgi' script before using it to construct and then run a command. An unauthenticated, remote attacker can leverage this issue to execute arbitrary code on th...

CVE-2012-1795

The webglimpse.cgi script in Webglimpse before version 2.20.0 is vulnerable to remote command execution . The root cause is the insufficient sanitization of user input provided to the query parameter, which allows unauthenticated remote attackers to inject shell metacharacters to execute arbitrar...