CVE-2008-4318

Observer 0.3.2.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the query parameter to (1) whois.php or (2) netcmd.php.

Date published : 2008-09-29

https://www.exploit-db.com/exploits/6559

http://securityreason.com/securityalert/4322