remote command execution in Affinity Path product
(support_page.cgi)

Developed by: Affinity Path
http://www.Affinitypath.com
Program Name:support_page.cgi v 1.6
Solution : None at this time
Risk factor : High
vendor: no respon

An attacker may exploit this vulnerability to execute
commands on
the remote host by adding special parameters to
support_page.cgi script.

Proof Of Concept:
http://[target]/support_page.cgi?file_name=|command|

blahplok@yahoo.com