CVE-2014-7260

Publication date

2014-12-12 00:00:00

Family

jpcert

State

PUBLISHED

Description

The Server Side Includes (SSI) implementation in the File Upload BBS component in ULTRAPOP.JP i-HTTPD allows remote attackers to execute arbitrary commands by uploading files containing commands in SSI directives.