VULNERABILITY INTELLIGENCE
CVE-2007-3572
CVSS score9.3 HIGH
EPSS probability8.38%
CISA KEVNot currently listed
Published2007-07-05
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C
Description
Incomplete blacklist vulnerability in cgi-bin/runDiagnostics.cgi in the web interface on the Yoggie Pico and Pico Pro allows remote attackers to execute arbitrary commands via shell metacharacters in the param parameter, as demonstrated by URL encoded "`" (backtick) characters (%60 sequences).
Primary references
- cve@mitre.org — Exploit
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org — Exploit, Vendor Advisory
- cve@mitre.org — Exploit
- cve@mitre.org
- cve@mitre.org
- af854a3a-2127-422b-91ae-364da2661108 — Exploit
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Exploit