Lucene search
K

EV0076.txt

🗓️ 26 Feb 2006 00:00:00Reported by Aliaksandr HartsuyeuType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 38 Views

New eVuln Advisory: Guestex Shell Command Execution Vulnerability in Guestext software v1.

Related
Code
ReporterTitlePublishedViews
Family
CVE
CVE-2006-0777
19 Feb 200600:00
cve
Cvelist
CVE-2006-0777
19 Feb 200600:00
cvelist
EUVD
EUVD-2006-0783
7 Oct 202500:30
euvd
NVD
CVE-2006-0777
19 Feb 200600:02
nvd
Prion
Code injection
19 Feb 200600:02
prion
securityvulns
[eVuln] Guestex Shell Command Execution Vulnerability
25 Feb 200600:00
securityvulns
`New eVuln Advisory:  
Guestex Shell Command Execution Vulnerability  
http://evuln.com/vulns/76/summary.html  
  
--------------------Summary----------------  
eVuln ID: EV0076  
CVE: CVE-2006-0777  
Software: Guestext  
Sowtware's Web Site: http://www.teca-scripts.com/  
Versions: 1.0  
Critical Level: Dangerous  
Type: Command Execution  
Class: Remote  
Status: Unpatched. No reply from developer(s)  
Exploit: Available  
Solution: Not Available  
Discovered by: Aliaksandr Hartsuyeu (eVuln.com)  
  
-----------------Description---------------  
Vulnerable Script: guestex.pl  
  
Variable $form{'email'} isn't properly sanitized. This can be used to execute arbitrary shell commands.  
  
System access is possible.  
  
--------------Exploit----------------------  
Available at: http://evuln.com/vulns/76/exploit.html  
  
When adding new record:  
  
email: [email protected];[command]  
  
--------------Solution---------------------  
No Patch available.  
  
--------------Credit-----------------------  
Discovered by: Aliaksandr Hartsuyeu (eVuln.com)  
  
  
Regards,  
Aliaksandr Hartsuyeu  
http://evuln.com - Penetration Testing Services  
.  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation