CVE-2008-1331

cgi-data/FastJSData.cgi in OmniPCX Office with Internet Access services OXO210 before 210/091.001, OXO600 before 610/014.001, and other versions, allows remote attackers to execute arbitrary commands and "obtain OXO resources" via shell metacharacters in the id2 parameter.

• CWE-20

• http://secunia.com/advisories/29798Third Party Advisory
• http://www.securityfocus.com/archive/1/492383/100/0/threadedThird Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/28758Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1020082Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2008/1057Permissions Required
• http://www1.alcatel-lucent.com/psirt/statements/2008001/OXOrexec.htmVendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41560Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/5662Third Party Advisory, VDB Entry
• http://secunia.com/advisories/29798Third Party Advisory
• http://www.securityfocus.com/archive/1/492383/100/0/threadedThird Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/28758Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1020082Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2008/1057Permissions Required
• http://www1.alcatel-lucent.com/psirt/statements/2008001/OXOrexec.htmVendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41560Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/5662Third Party Advisory, VDB Entry

Published

Apr 2, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-1325Multiple directory traversal vulnerabilities in index.php in…
• CVE-2008-1326Cross-site scripting (XSS) vulnerability in search.php in Ga…
• CVE-2008-1327Gallarific does not require authentication for (1) users.php…
• CVE-2008-1328Buffer overflow in the LGServer service in CA ARCserve Backu…
• CVE-2008-1329Unspecified vulnerability in the NetBackup service in CA ARC…
• CVE-2008-1330Unspecified vulnerability in the Windows client API in Novel…
• CVE-2008-1332Unspecified vulnerability in Asterisk Open Source 1.2.x befo…
• CVE-2008-1333Format string vulnerability in Asterisk Open Source 1.6.x be…
• CVE-2008-1334cgi/b on the BT Home Hub router allows remote attackers to b…
• CVE-2008-1335The ipsec4_get_ulp function in the kernel in NetBSD 2.0 thro…
• CVE-2008-1336SQL injection vulnerability in Koobi CMS 4.2.3 through 4.3.0…
• CVE-2008-1337The instant message service in Timbuktu Pro 8.6.5 RC 229 and…