2005-05-10 04:00:00
mitre
PUBLISHED
display.cgi in Aborior Encore WebForum allows remote to execute arbitrary commands via shell metacharacters in the file variable.