2005-03-08 05:00:00
mitre
PUBLISHED
includer.cgi in The Includer allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the URL or (2) the template parameter.