CVE-2009-4498: Improper Neutralization of Special Elements used in an OS Command

The nodeprocesscommand function in Zabbix Server before 1.8 allows remote attackers to execute arbitrary commands via a crafted request...