Security Advisory
CVE-2014-2935
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
costview3/xmlrpc_server/xmlrpc.php in CostView in Caldera 9.20 allows remote attackers to execute arbitrary commands via shell metacharacters in a methodCall element in a PHP XMLRPC request.