Vulnerabilities (CVE)

Filtered by vendor Amensa-soft Subscribe
Filtered by product K\+b-bestellsystem
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2007-6176 1 Amensa-soft 1 K\+b-bestellsystem 2023-12-10 10.0 HIGH N/A
kb_whois.cgi in K+B-Bestellsystem (aka KB-Bestellsystem) allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) domain or (2) tld parameter in a check_owner action.