VYPR

Ohcount

by Ohcount Project

CVEs (1)

  • CVE-2017-16926CriNov 22, 2017
    risk 0.64cvss 9.8epss 0.06

    Ohcount 3.0.0 is prone to a command injection via specially crafted filenames containing shell metacharacters, which can be exploited by an attacker (providing a source tree for Ohcount processing) to execute arbitrary code as the user running Ohcount.