Web Blog has been reported to be prone to a vulnerability that may permit remote attackers to execute arbitrary commands in the context of the hosting web server. This is due to insufficient sanitization of shell metacharacters from variables which will be used as an argument to a function that invokes the shell directly.
Leif Wright Web Blog blog.cgi ViewFile Request file Parameter Arbitrary Command Execution
Remote / Network Access
Loss of Integrity,
Loss of Availability
Web Blog contains a flaw that may allow a malicious user to execute arbitrary commands. The issue is triggered when a specially crafted URL is sent to the server. It is possible that the flaw may allow arbitrary code execution resulting in a loss of confidentiality, integrity, and/or availability.
Currently, there are no known upgrades, patches, or workarounds available to correct this issue.