VULNERABILITY INTELLIGENCE
CVE-2008-1401
CVSS score4.3 MEDIUM
EPSS probability3.17%
CISA KEVNot currently listed
Published2008-03-20
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:N/I:P/A:N
Description
Format string vulnerability in the Net Inspector HTTP server (mghttpd) in MG-SOFT Net Inspector 6.5.0.828 and earlier for Windows allows remote attackers to execute arbitrary code via format string specifiers in the URI, which is recorded in a log file.
Weakness classification
- CWE-134: Use of Externally-Controlled Format String