CVE-2007-1587 templates/config/mail.tpl in Tim Soderstrom StatsDawg 0.92 allows remote attackers to execute arbitrary programs by specifying the program name in the qshapeLocation parameter.
HighCVSS 10.0
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
templates/config/mail.tpl in Tim Soderstrom StatsDawg 0.92 allows remote attackers to execute arbitrary programs by specifying the program name in the qshapeLocation parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tim soderstrom statsdawg | = 0.92 | No fix listed |
References
- www.statsdawg.org patch
- statsdawg-qshapelocation-command-execution(33283) vdb-entry