Security Advisory

CVE-2008-5810

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2009-01-02 18:00:00

Last updated 2024-08-07 11:04:44

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

WBPublish (aka WBPublish.exe) in Fujitsu-Siemens WebTransactions 7.0, 7.1, and possibly other versions allows remote attackers to execute arbitrary commands via shell metacharacters in input that is sent through HTTP and improperly used during temporary session data cleanup, possibly related to (1) directory names, (2) template names, and (3) session IDs.

← Browse all CVEs View on cve.org ↗