Description
Xangati XSR before 11 and XNR before 7 allows remote attackers to execute arbitrary commands via shell metacharacters in a gui_input_test.pl params parameter to servlet/Installer.
References (1)
Core 1
Core References
US Government Resource third-party-advisory
x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/657622
Scores
EPSS
0.0469
EPSS Percentile
90.7%
Details
CWE
CWE-78
Status
published
Products (2)
xangati/xangati_software_release
xangati/xangati_xnr
Published
Apr 15, 2014
Tracked Since
Feb 18, 2026