CVE-2008-4318

Observer 0.3.2.1 and earlier are affected by CVE-2008-4318, where remote attackers can execute arbitrary commands by injecting shell metacharacters into the query parameter of whois.php or netcmd.php. The vulnerability is reported as a vulnerable remote command execution in these PHP scripts, but...