Categorie: Computer Crime Posted: 2004-11-03 by ReCall Views: 602 Source: Click here
Current Rating: Not rated
Details
Description: A vulnerability was reported in HTML::Merge. A remote user can execute shell commands on the target system.
The vendor reported that 'printsource.pl' does not properly validate user-supplied input in the 'template' parameter. A remote user can supply specially crafted input to execute shell commands on the target system with the privileges of the target web service.
Impact: A remote user can execute shell commands on the target system with the privileges of the target web service.
Solution: The vendor has released a fixed version (3.43), available at:
