CVE-2008-4318

Published: Sep 29, 2008Modified: Apr 23, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Observer 0.3.2.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the query parameter to (1) whois.php or (2) netcmd.php.

Affected (13)

Products: Project Observer: Observer

Project Observer

1 product

Observer

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Project Observer Observer	Up to 0.3.2.1
Project Observer Observer	Version 0.1.0
Project Observer Observer	Version 0.1.1
Project Observer Observer	Version 0.1.2
Project Observer Observer	Version 0.2.0
Project Observer Observer	Version 0.2.1
Project Observer Observer	Version 0.2.2
Project Observer Observer	Version 0.2.3
Project Observer Observer	Version 0.2.4
Project Observer Observer	Version 0.2.5
Project Observer Observer	Version 0.3.1
Project Observer Observer	Version 0.3.2
Project Observer Observer	Version 0.30-pre-1