Total vulnerabilities in the database
vmtadmin.cgi in VMTurbo Operations Manager before 4.6 build 28657 allows remote attackers to execute arbitrary commands via shell metacharacters in the fileDate parameter in a DOWN call.
Software | From | Fixed in |
---|---|---|
vmturbo / operations_manager | - | 4.6.x |
vmturbo / operations_manager | 4.0 | 4.0.x |
vmturbo / operations_manager | 4.5-1 | 4.5-1.x |
vmturbo / operations_manager | 4.5 | 4.5.x |