CVE-2013-6041

Name of the Vulnerable Software and Affected Versions Softaculous Webuzo versions prior to 2.1.4

Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in a SOFTCookies sid cookie within a "login" action. This is related to the index.php file.

Recommendations For versions prior to 2.1.4, update to version 2.1.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the index.php file to minimize the risk of exploitation. Avoid using the sid cookie in the affected login action until the issue is resolved.