Netjuke is a web based audio streaming jukebox program which supports MP3, Ogg Vorbis, and other music file formats. An issue exists in versions of Netjuke prior to 1.0b7 which could enable remote attackers to execute arbitrary commands as the web server user. Exploitation of this issue could lead to a compromise of the host. This issue is the result of insufficient validation of user input passed to the 'section' variable.
Netjuke is a web based audio streaming jukebox program which supports MP3, Ogg Vorbis, and other music file formats. An issue exists in versions of Netjuke prior to 1.0b7 which could enable remote attackers to execute arbitrary commands as the web server user. Exploitation of this issue could lead to a compromise of the host. This issue is the result of insufficient validation of user input passed to the 'section' variable.