CVE-2014-0359 Xangati XSR before 11 and XNR before 7 allows remote attackers to execute arbitrary commands via shell metacharacters in a gui_input_test.pl params parameter to servlet/Installer.
HighCVSS 9.0
EPSS 6.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Xangati XSR before 11 and XNR before 7 allows remote attackers to execute arbitrary commands via shell metacharacters in a gui_input_test.pl params parameter to servlet/Installer.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| xangati software release | All versions | No fix listed |
| xangati xnr | All versions | No fix listed |
References
- VU#657622 third-party-advisory us-government-resource