diatheke: insufficient input sanitizing
| Package(s): | diatheke | CVE #(s): | CVE-2008-0932 | ||||||||||||||||
| Created: | February 26, 2008 | Updated: | March 4, 2008 | ||||||||||||||||
| Description: | From the Debian advisory: Dan Dennison discovered that Diatheke, a CGI program to make a bible website, performs insufficient sanitizing of a parameter, allowing a remote attacker to execute arbitrary shell commands as the web server user. | ||||||||||||||||||
| Alerts: |
| ||||||||||||||||||