Security Advisory

CVE-2008-4304

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2008-12-23 18:13:00

Last updated 2024-08-07 10:08:35

Assigner redhat

CVSS score not scored

State PUBLISHED

Description

general/login.php in phpCollab 2.5 rc3 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in unspecified input related to the SSL_CLIENT_CERT environment variable. NOTE: in some environments, SSL_CLIENT_CERT always has a base64-encoded string value, which may impose constraints on injection for typical shells.

← Browse all CVEs View on cve.org ↗