VULHUB ™

Web+ is a development language for use in creating web-based client/server applications. In Linux versions of the product, an example script installed in Web+ (Web+Ping) which fails to correctly filter shell meta characters. As a result, parameters passed to this script may contain malicious shell commands, allowing an attacker to remotely execute or read any file which is accessible by the Web+ user. Windows NT versions of Web+ are apparently not vulnerable.

Web+ is a development language for use in creating web-based client/server applications. In Linux versions of the product, an example script installed in Web+ (Web+Ping) which fails to correctly filter shell meta characters. As a result, parameters passed to this script may contain malicious shell commands, allowing an attacker to remotely execute or read any file which is accessible by the Web+ user. Windows NT versions of Web+ are apparently not vulnerable.