CVE-2007-6459

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.9% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-12-20 · updated 2026-06-16
Weakness: CWE-94

Description

Anon Proxy Server 0.100, and probably 0.101, allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the host parameter to diagdns.php, and (2) the host parameter and possibly (3) the port parameter to diagconnect.php, a different vulnerability than CVE-2007-6460.

Affected products

Anon Proxy Server: 0.100

References

http://osvdb.org/43711
http://osvdb.org/43712
http://securityreason.com/securityalert/3463
http://www.securityfocus.com/archive/1/485151/100/0/threaded
http://www.securityfocus.com/bid/26882
https://www.exploit-db.com/exploits/4734
http://osvdb.org/43711
http://osvdb.org/43712
http://securityreason.com/securityalert/3463
http://www.securityfocus.com/archive/1/485151/100/0/threaded
http://www.securityfocus.com/bid/26882
https://www.exploit-db.com/exploits/4734

Get alerted when CVE-2007-6459 or the next vulnerability affects your stack