NuytsTech Security

CVE-2008-1331

by ·

cgi-data/FastJSData.cgi in OmniPCX Office with Internet Access services OXO210 before 210/091.001, OXO600 before 610/014.001, and other versions, allows remote attackers to execute arbitrary commands and "obtain OXO resources" via shell metacharacters in the id2 parameter.

Date published : 2008-04-02

http://www.securityfocus.com/bid/28758

http://www.securityfocus.com/archive/1/492383/100/0/threaded

Tags: