CVE-2008-4796
Fixed in a distro release EPSS 9%
The _httpsrequest function (Snoopy/Snoopy.class.php) in Snoopy 1.2.3 and earlier, as used in (1) ampache, (2) libphp-snoopy, (3) mahara, (4) mediamate, (5) opendb, (6) pixelpost, and possibly other products, allows remote attackers to execute arbitrary commands via shell metacharacters in https URLs.
Products: snoopy_project snoopy, debian_linux, nagios, wordpress
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | libphp-snoopy | 1.2.4-1 |
| Debian 12 | wordpress | 2.5.1-9 |
| Debian 13 | wordpress | 2.5.1-9 |
| Debian 14 | wordpress | 2.5.1-9 |
| Debian 4.0 | moodle | 1.6.3-2+etch1 |
| Debian 4.0 | wordpress | 2.0.10-1etch4 |
| Debian 4.0 | wordpress | 2.0.10-1etch5 |
| Debian 5.0 | wordpress | 2.5.1-11+lenny1 |
| openSUSE Tumbleweed | nagios | 4.4.6-2.5 |