CVE-2008-7158: Numarasoftware Footprints

High severity, CVSS 10.0. EPSS: 3.3% chance of exploitation in the next 30 days.

Numara FootPrints 7.5a through 7.5a1 and 8.0 through 8.0a allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) transcriptFile parameter to MRcgi/MRchat.pl or (2) LOADFILE parameter to MRcgi/MRABLoad2.pl. NOTE: some of these details are obtained from third party information.

Affected products

• Numarasoftware Footprints: version 7.5a only; version 7.5a1 only; version 8.0 only; version 8.0a only

Published 2009-09-02. Last modified 2026-06-16.