statsconfig.pl in OmniHTTPd 2.07 allows remote attackers to execute arbitrary commands via the mostbrowsers parameter, whose value is used as part of a generated Perl script.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|
| Omnihttpd | Omnicron | 2.0.7 (including) | 2.0.7 (including) |
References