What’s Vulnerable › Vulnerabilities

CVE-2008-4318

• Severity: critical (CVSS 10.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 14.1% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2008-09-29 · updated 2026-06-16
• Weakness: CWE-20

Description

Observer 0.3.2.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the query parameter to (1) whois.php or (2) netcmd.php.

Affected products

• Project-Observer Observer: through 0.3.2.1; 0.1.0, 0.1.1, 0.1.2, 0.2.0, 0.2.1, 0.2.2 (+6)

References

• http://securityreason.com/securityalert/4322
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45398
• https://www.exploit-db.com/exploits/6559
• http://securityreason.com/securityalert/4322
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45398
• https://www.exploit-db.com/exploits/6559

Get alerted when CVE-2008-4318 or the next vulnerability affects your stack