CVE-2006-6454

CVE-2006-6454 affects J-OWAMP Web Interface 2.1b and earlier. The vulnerability arises in execInBackground.php where remote attackers can cause arbitrary command execution by injecting shell metacharacters into the exe and args parameters used in an exec() call. This is a remote, unauthenticated ...

CVE-2006-6453

The CVE affects J-OWAMP Web Interface 2.1, via JOWAMP_ShowPage.php, enabling remote authenticated users to execute arbitrary PHP code through a URL in the link parameter. Base CVSS v2 score 6.5 (MEDIUM). Exploitation details exist in external references (e.g., Exploit-DB). No remediation details ...