CVE:CVE-2008-4796
CNNVD:CNNVD-200810-509
Snoopy是模拟web浏览器的PHP类，可自动完成检索网页内容和张贴表单等任务。 
Snoopy没有正确地过滤对_httpsrequest()函数的输入便在exec()调用中使用，远程攻击者可以提供特制的URL通过fetch()或submit()函数注入并执行任意shell命令。
solution:Upgrade snoopy_project snoopy to a higher version than 1.2.3,and avoid the version (,1.2.3]; Upgrade debian debian_linux to a higher version than 4.0,5.0,and avoid the version 4.0,5.0; Upgrade nagios nagios to a higher version than 4.2.2,and avoid the version (,4.2.2); Upgrade wordpress wordpress to a higher version than 2.6.3,and avoid the version (,2.6.3)