[ ipcop-Bugs-3601836 ] IPCop v2.x multiple vulnerabilities

Bugs item #3601836, was opened at 2013-01-22 19:54
Message generated for change (Tracker Item Submitted) made by bcoles
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428516&aid=3601836&group_id=40604

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: None
Group: 2.0.0
Status: Open
Resolution: None
Priority: 5
Private: Yes
Submitted By: bcoles (bcoles)
Assigned to: Nobody/Anonymous (nobody)
Summary: IPCop v2.x multiple vulnerabilities

Initial Comment:
The web application component of IPCop v2.x allows authenticated remote attackers to execute arbitrary commands as 'nobody'.

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428516&aid=3601836&group_id=40604

------------------------------------------------------------------------------
Master Visual Studio, SharePoint, SQL, ASP.NET, C# 2012, HTML5, CSS,
MVC, Windows 8 Apps, JavaScript and much more. Keep your skills current
with LearnDevNow - 3,200 step-by-step video tutorials by Microsoft
MVPs and experts. ON SALE this month only -- learn more at:
http://p.sf.net/sfu/learnnow-d2d