wps_shop.cgi in WPS Web Portal System 0.7.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) art and (2) cat variables.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Web_portal_system | Wps | 0.7.0 (including) | 0.7.0 (including) |