CVE-2012-1795 Information

Description

webglimpse.cgi in Webglimpse before 2.20.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the query parameter as exploited in the wild in March 2012.

Reference

http://osvdb.org/80344 http://secunia.com/advisories/48452 http://www.kb.cert.org/vuls/id/364363 http://www.securitytracker.com/id?1026825