Description (CNA)
OpenBase 10.0.5 and earlier allows remote authenticated users to execute arbitrary commands via shell metacharacters in arguments to the (1) AsciiBackup, (2) OEMLicenseInstall, and possibly other stored procedures.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://www.securityfocus.com/bid/26347
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38291
- http://www.netragard.com/pdfs/research/NETRAGARD-20070313-OPENBASE.txt
- http://secunia.com/advisories/27525
ADP enrichment
No English description supplied.