CVE-2006-7012: Scart

High severity, CVSS 10.0. EPSS: 5.2% chance of exploitation in the next 30 days.

scart.cgi in SCart 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the page parameter of a show_text action.

Affected products

  • Scart Scart: version 2.0 only

Published 2007-02-15. Last modified 2026-06-16.