Amensa-Soft: >> K+b-Bestellsystem >> 2.3.3 Security Vulnerabilities
kb_whois.cgi in K+B-Bestellsystem (aka KB-Bestellsystem) allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) domain or (2) tld parameter in a check_owner action.
CVSS Score
10.0
EPSS Score
0.074
Published
2007-11-30