CVE-2008-6826 dhtml.pl in MHF Media Pro allows remote attackers to execute arbitrary commands via shell metacharacters in the page parameter, as demonstrated using the (1) advert_top.htm or (2) advert_login.htm pag...
HighCVSS 10.0
EPSS 4.6%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
dhtml.pl in MHF Media Pro allows remote attackers to execute arbitrary commands via shell metacharacters in the page parameter, as demonstrated using the (1) advert_top.htm or (2) advert_login.htm pages.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mhfmedia ads pro | All versions | No fix listed |
References
- 49406 exploit vdb-entry
- 32402 third-party-advisory vendor-advisory
- 31923 exploit vdb-entry
- adspro-dhtml-command-execution(46121) vdb-entry
- 6845 exploit