Remote Code Execution in nlog CGI Scripts

CVE-1999-1278

nlog CGI scripts do not properly filter shell metacharacters from the IP address argument, which could allow remote attackers to execute certain commands via (1) nlog-smb.pl or (2) rpc-nlog.pl.

Learn more about our Web Application Penetration Testing UK.