CVE-2007-6176
amensa-soft k\+b-bestellsystem: no CVSS score yet. EPSS 4.6% chance of exploitation in the next 30 days.
kb_whois.cgi in K+B-Bestellsystem (aka KB-Bestellsystem) allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) domain or (2) tld parameter in a check_owner action.
- EPSS
- 4.6% chance of exploitation in the next 30 days; higher than 91% of CVEs (scores of 2026-10-31)
- CWE
- CWE-20
- Published
- Modified
- Record from
- the NVD, synced
Affected
- amensa-soft:k\+b-bestellsystem