udirectory.pl in Microburst Technologies uDirectory 2.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the category_file field.
Affected Software
Name |
Vendor |
Start Version |
End Version |
Udirectory |
Microburst |
2.0 (including) |
2.0 (including) |
References