CVE-2007-6459: Anon Proxy Server

Medium severity, CVSS 6.8. EPSS: 2.9% chance of exploitation in the next 30 days.

Anon Proxy Server 0.100, and probably 0.101, allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the host parameter to diagdns.php, and (2) the host parameter and possibly (3) the port parameter to diagconnect.php, a different vulnerability than CVE-2007-6460.

Affected products

• Anon Proxy Server Anon Proxy Server: version 0.100 only

Published 2007-12-20. Last modified 2026-06-16.