The host is installed with MobaXterm 11.1.0.3860 and is prone to an argument injection vulnerability. A flaw is present in the application, which fails to handle unspecified vectors. Successful exploitation could allows remote attackers to execute arbitrary commands when the user visits a specially crafted URL.