A vulnerability has been discovered in NetCat, which can be exploited by malicious people to compromise a vulnerable system.
Input passed via the "search_query" parameter to /search is not properly sanitised before being used in a call to "eval()". This can be exploited to inject and execute arbitrary PHP code.
The vulnerability is confirmed in version 4.5.2 Extra. Other versions may also be affected.
Vulnerable Products
Vulnerable Software: NetCat 4.x
Solution
Edit the source code to ensure that input is properly sanitised.
