Security Advisory
CVE-2008-4318
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Observer 0.3.2.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the query parameter to (1) whois.php or (2) netcmd.php.