CVE-2008-6669: Dirk Bartley NWEB2FAX

High severity, CVSS 7.5. EPSS: 4.2% chance of exploitation in the next 30 days.

viewrq.php in nweb2fax 0.2.7 and earlier allows remote attackers to execute arbitrary code via shell metacharacters in the var_filename parameter in a (1) tif or (2) pdf format action.

Affected products

• Dirk Bartley NWEB2FAX: up to and including 0.2.7; version 0.1 only; version 0.2 only; version 0.2.1 only; version 0.2.4 only; version 0.2.5 only; …

Published 2009-04-08. Last modified 2026-06-16.