Test ID:	1.3.6.1.4.1.25623.1.0.20014
Category:	Web application abuses
Title:	WebGUI < 6.7.6 arbitrary command execution
Summary:	The installed version of WebGUI on the remote host fails to sanitize; user-supplied input via the 'class' variable to various sources before using it to run commands.
Description:	Summary: The installed version of WebGUI on the remote host fails to sanitize user-supplied input via the 'class' variable to various sources before using it to run commands. Vulnerability Impact: By leveraging this flaw, an attacker may be able to execute arbitrary commands on the remote host within the context of the affected web server userid. Solution: Upgrade to WebGUI 6.7.6 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2005-4694 BugTraq ID: 15083 http://www.securityfocus.com/bid/15083 http://www.osvdb.org/19933 http://secunia.com/advisories/17158 http://www.vupen.com/english/advisories/2005/2060 XForce ISS Database: webgui-unknown-code-execution(22730) https://exchange.xforce.ibmcloud.com/vulnerabilities/22730
Copyright	Copyright (C) 2005 David Maciejak

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.