CVE-2009-3233: Cameron Morland Changetrack

High severity, CVSS 7.2. EPSS: 1% chance of exploitation in the next 30 days.

changetrack 4.3 allows local users to execute arbitrary commands via CRLF sequences and shell metacharacters in a filename in a directory that is checked by changetrack.

Affected products

• Cameron Morland Changetrack: version 4.3 only

Published 2009-09-17. Last modified 2026-06-16.