CGI-Club imTRBBS 1.0 - Remote Command Execution

2005-06-29T00:00:00
ID EXPLOITPACK:667ED12D87DA9FAC78C20A69A8E8CFC1
Type exploitpack
Reporter blahplok
Modified 2005-06-29T00:00:00

Description

CGI-Club imTRBBS 1.0 - Remote Command Execution

                                        
                                            source: https://www.securityfocus.com/bid/14091/info

imTRBBS is affected by a remote command execution vulnerability.

Specifically, an attacker can supply arbitrary commands prefixed with the '|' character through the 'im_trbbs.cgi' script that will be executed in the context of the Web server running the application.

This issue is reported to affect imTRBBS version 1.02; other versions may also be vulnerable. 

http://www.example.com/cgi-bin/im_trbbs.cgi?uid=parameter&df=bbs.dat|ls|