Files
CVEs-PoC/2017/CVE-2017-16926.md
2025-09-29 21:09:30 +02:00

716 B

CVE-2017-16926

Description

Ohcount 3.0.0 is prone to a command injection via specially crafted filenames containing shell metacharacters, which can be exploited by an attacker (providing a source tree for Ohcount processing) to execute arbitrary code as the user running Ohcount.

POC

Reference

Github

No PoCs found on GitHub currently.