Anon Proxy Server 0.100 and probably 0.101 allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the host parameter to diagdns.php and (2) the host parameter and possibly (3) the port parameter to diagconnect.php a different vulnerability than CVE-2007-6460.