vmtadmin.cgi in VMTurbo Operations Manager before 4.6 build 28657 allows remote attackers to execute arbitrary commands via shell metacharacters in the fileDate parameter in a DOWN call.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Operations_manager | Vmturbo | * | 4.6 (including) |
| Operations_manager | Vmturbo | 4.0 (including) | 4.0 (including) |
| Operations_manager | Vmturbo | 4.5 (including) | 4.5 (including) |
| Operations_manager | Vmturbo | 4.5-1 (including) | 4.5-1 (including) |