Back to CVE Browser

CVE-2008-1331

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0780%

EPSS Percentile10.05th

PublishedApr 2, 2008

Last ModifiedApr 23, 2026

Vulnerability Description

cgi-data/FastJSData.cgi in OmniPCX Office with Internet Access services OXO210 before 210/091.001, OXO600 before 610/014.001, and other versions, allows remote attackers to execute arbitrary commands and "obtain OXO resources" via shell metacharacters in the id2 parameter.

Affected Platforms (CPE)

📦

Alcatel Lucent

Omnipcx Office

>= 210 and < 210\/091.001

📦

Alcatel Lucent

Omnipcx Office

>= 610 and < 610\/014.001

References & Advisories

🔗 http://secunia.com/advisories/29798

🔗 http://www.securityfocus.com/archive/1/492383/100/0/threaded

🔗 http://www.securityfocus.com/bid/28758

🔗 http://www.securitytracker.com/id?1020082

🔗 http://www.vupen.com/english/advisories/2008/1057

🔗 http://www1.alcatel-lucent.com/psirt/statements/2008001/OXOrexec.htm

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/41560

🔗 https://www.exploit-db.com/exploits/5662

Related Vulnerabilities

CVE-2026-121917.8

A vulnerability was found in Comma AI Openpilot 0.11. This issue affects the function pickle.load/pickle.loads of the file selfdri...

CVE-2026-121905.3

A vulnerability has been found in Genspark AI Workspace App 2.8.4 on Android. This vulnerability affects unknown code of the compo...

CVE-2026-121895.3

A flaw has been found in Moovit Bus & Public Transit App 1.18 on Android. This affects an unknown part of the component com.tranzm...

CVE-2026-121886.3

A vulnerability was detected in Grit42 Grit up to 0.11.0. Affected by this issue is some unknown functionality of the file modules...