CVE-2006-6678

CVE-2006-6678 · HIGH Severity

AV:N/AC:L/AU:N/C:P/I:P/A:P

The edit_textarea function in form-file.c in Netrik 1.15.4 and earlier does not properly verify temporary filenames when editing textarea fields, which allows attackers to execute arbitrary commands via shell metacharacters in the filename.

Learn more about our Web Application Penetration Testing UK.