Unrated severityNVD Advisory· Published Nov 30, 2007· Updated Apr 23, 2026
CVE-2007-6176
CVE-2007-6176
Description
kb_whois.cgi in K+B-Bestellsystem (aka KB-Bestellsystem) allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) domain or (2) tld parameter in a check_owner action.
Affected products
1- cpe:2.3:a:amensa-soft:k\+b-bestellsystem:2.3.3:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5- marc.infonvdExploit
- www.securityfocus.com/bid/26541nvdExploit
- secunia.com/advisories/27782nvdVendor Advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/38635nvd
- www.exploit-db.com/exploits/4647nvd
News mentions
0No linked articles in our index yet.