CVE-2008-1214: Code Injection
MRcgi/MRProcessIncomingForms.pl in Numara FootPrints 8.1 on Linux allows remote attackers to execute arbitrary code via shell metacharacters in the PROJECTNUM parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-1214?
CVE-2008-1214 is considered a critical vulnerability due to its potential for remote arbitrary code execution.
How do I fix CVE-2008-1214?
To fix CVE-2008-1214, upgrade to a patched version of Numara FootPrints beyond version 8.1.
What software is affected by CVE-2008-1214?
CVE-2008-1214 specifically affects the Numara FootPrints version 8.1 on Linux systems.
How can attackers exploit CVE-2008-1214?
Attackers can exploit CVE-2008-1214 by sending specially crafted requests with shell metacharacters in the PROJECTNUM parameter.
Are there known exploits for CVE-2008-1214?
Yes, there are reports indicating that CVE-2008-1214 can be exploited remotely without authentication.