Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:spotweb:spotweb:*:*:*:*:*:*:*:*

1 brief RSS
high threat

Remote Code Execution via OS Command Injection in Spotweb

Spotweb versions 1.5.8 and earlier are vulnerable to remote code execution through the NZB handler, triggered by maliciously crafted Usenet spot titles.

exploited Spotweb web-vulnerability remote-code-execution command-injection
1t 1c