2006-05-21 16:00:00
mitre
PUBLISHED
viewFile.php in the scm component of Gforge before 4.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the file_name parameter.