CVE-2008-7158 Numara FootPrints 7.5a through 7.5a1 and 8.0 through 8.0a allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) transcriptFile parameter to MRcgi/MRchat.pl or (2) L...
HighCVSS 10.0
EPSS 3.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Numara FootPrints 7.5a through 7.5a1 and 8.0 through 8.0a allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) transcriptFile parameter to MRcgi/MRchat.pl or (2) LOADFILE parameter to MRcgi/MRABLoad2.pl. NOTE: some of these details are obtained from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| numarasoftware footprints | = 7.5a | No fix listed |
| numarasoftware footprints | = 7.5a1 | No fix listed |
| numarasoftware footprints | = 8.0 | No fix listed |
| numarasoftware footprints | = 8.0a | No fix listed |
References
- 42813 vdb-entry
- 42816 vdb-entry
- 28390 third-party-advisory vendor-advisory
- 27373 vdb-entry
- footprints-transcriptfile-command-execution(39810) vdb-entry
- footprintssupport.numarasoftware.com patch vendor-advisory