VMTurbo Operations Manager is prone to a remote command-execution vulnerability.

An attacker may leverage this issue to execute arbitrary OS commands in the context of the affected application.

Update to VMTurbo Operations Manager >= 4.6-28657.

Input passed via the "fileDate" GET parameter to /cgi-bin/vmtadmin.cgi (when "callType" is set to "DOWN" and "actionType" is set to "GETBRAND", "GETINTEGRATE", "FULLBACKUP", "CFGBACKUP", "EXPORTBACKUP", "EXPERTDIAGS", or "EXPORTDIAGS") is not properly sanitised before being used to execute commands. This can be exploited to inject and execute arbitrary shell commands with privileges of the "wwwrun" user.

VMTurbo Operations Manager 4.6 and prior are vulnerable.

Send two special crafted HTTP GET requests and check the response.

• http://secunia.com/secunia_research/2014-8/
• http://www.securityfocus.com/bid/69225

---

Updated on 2015-03-25