WebGlimpse query Parameter Command Injection

The version of WebGlimpse installed on the remote host does not sufficiently sanitize user input to the 'query' parameter of the 'webglimpse.cgi' script before using it to construct and then run a command. An unauthenticated, remote attacker can leverage this issue to execute arbitrary code on th...

CVE-2012-1795

WebGlimpse (Webglimpse) CGI: webglimpse.cgi in Webglimpse before 2.20.0 is vulnerable to remote command execution via shell metacharacters in the query parameter. DSquare reports a remote code execution vulnerability in WebGlimpse 2.18.8, and the issue is described as exploitable remotely with th...