| Reporter | Title | Published | Views | Family All 6 |
|---|---|---|---|---|
| CVE-2006-0777 | 19 Feb 200600:00 | – | cve | |
| CVE-2006-0777 | 19 Feb 200600:00 | – | cvelist | |
| EUVD-2006-0783 | 7 Oct 202500:30 | – | euvd | |
| CVE-2006-0777 | 19 Feb 200600:02 | – | nvd | |
| Code injection | 19 Feb 200600:02 | – | prion | |
| [eVuln] Guestex Shell Command Execution Vulnerability | 25 Feb 200600:00 | – | securityvulns |
`New eVuln Advisory:
Guestex Shell Command Execution Vulnerability
http://evuln.com/vulns/76/summary.html
--------------------Summary----------------
eVuln ID: EV0076
CVE: CVE-2006-0777
Software: Guestext
Sowtware's Web Site: http://www.teca-scripts.com/
Versions: 1.0
Critical Level: Dangerous
Type: Command Execution
Class: Remote
Status: Unpatched. No reply from developer(s)
Exploit: Available
Solution: Not Available
Discovered by: Aliaksandr Hartsuyeu (eVuln.com)
-----------------Description---------------
Vulnerable Script: guestex.pl
Variable $form{'email'} isn't properly sanitized. This can be used to execute arbitrary shell commands.
System access is possible.
--------------Exploit----------------------
Available at: http://evuln.com/vulns/76/exploit.html
When adding new record:
email: [email protected];[command]
--------------Solution---------------------
No Patch available.
--------------Credit-----------------------
Discovered by: Aliaksandr Hartsuyeu (eVuln.com)
Regards,
Aliaksandr Hartsuyeu
http://evuln.com - Penetration Testing Services
.
`
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation