2005-06-30 04:00:00
mitre
PUBLISHED
im_trbbs.cgi in imTRSET 1.02 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the df parameter.