EUVD-2008-6631

Malware in sbrugna...

EUVD-2008-6630

Malware in sbrugna...

CVE-2008-6669: Improper Neutralization of Special Elements used in an OS Command

viewrq.php in nweb2fax 0.2.7 and earlier allows remote attackers to execute arbitrary code via shell metacharacters in the varfilename parameter in a 1 tif or 2 pdf format action...

CVE-2008-6668: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in nweb2fax 0.2.7 and earlier allow remote attackers to read arbitrary files via a .. dot dot in the 1 id parameter to comm.php and 2 varfilename parameter to viewrq.php...