TI-2007-05891 CVE-2007-6176 · GHSA-cwg9-gxcg-x6v2kb_whois.cgi in K+B-Bestellsystem (aka KB-Bestellsystem) allows remote attackers to…Priority MEDIUM 50kb_whois.cgi in K+B-Bestellsystem (aka KB-Bestellsystem) allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) domain or (2) tld parameter in a check_owner action.CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.04581 · Published 2007-11-30 · No fix listed CWE-20