CWE Code: 78
Vulnerability Type: privilege_escalation
CVSS Score: 7.1
CWE Name:  Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Summary: the triggers functionality in perforce server 2008.1 allows remote authenticated users with super privileges to execute arbitrary operating-system commands by using a "p4 client" command in conjunction with the form-in trigger script.
Access Authentication: SINGLE
Access Complexity: HIGH
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2010-03-05
Last Modified Date: 2010-03-08