2005-05-10 08:00:00
mitre
PUBLISHED
display.cgi in Aborior Encore WebForum allows remote to execute arbitrary commands via shell metacharacters in the file variable.