CVE:CVE-2006-6454
CNNVD:CNNVD-200612-205
J-OWAMP Web Interface中的execInBackground.php任意命令执行漏洞。远程攻击者可以通过传给(1)exe和(2)args参数的shell元字符(在exec函数中调用)来执行任意命令。
solution:Upgrade j-owamp web_interface to a higher version than 2.1b,and avoid the version (,2.1b]