CVE-2008-6826

dhtml.pl in MHF Media Pro allows remote attackers to execute arbitrary commands via shell metacharacters in the page parameter, as demonstrated using the 1 adverttop.htm or 2 advertlogin.htm pages...