5227 matches found
CVE-2001-0099
bsguest.cgi guestbook script allows remote attackers to execute arbitrary commands via shell metacharacters in the email address...
CVE-2001-0022
simplestguest.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the guestbook parameter...
CVE-2001-0023
everythingform.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the config parameter...
CVE-2001-0025
ad.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the file parameter...
CVE-2001-0025
CVE-2001-0025 affects the ad.cgi CGI program by Leif Wright. The vulnerability allows remote arbitrary command execution via shell metacharacters in the file parameter, with the CGI typically running under web server privileges (often root or nobody). The issue is documented in multiple sources (...
CVE-2001-0025: Undefined Security Weakness
ad.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the file parameter...
CVE-2001-0022: Undefined Security Weakness
simplestguest.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the guestbook parameter...
CVE-2001-0024: Undefined Security Weakness
simplestmail.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the MyEmail parameter...
CVE-2001-0023: Undefined Security Weakness
everythingform.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the config parameter...
CVE-2000-0878
The mailto CGI script allows remote attacker to execute arbitrary commands via shell metacharacters in the emailadd form field...
CVE-2000-0923
CVE-2000-0923 concerns the authenticate.cgi CGI in Aplio PRO, where remote attackers can execute arbitrary commands by injecting shell metacharacters into the password parameter. The entry lists a CVSS v2 base score of 7.5 (HIGH) with network access, low attack complexity, and no authentication. ...
CVE-2000-0296
The CVE-2000-0296 entry documents a local privilege-escalation flaw in fcheck, where embedding shell metacharacters in file names processed by fcheck can allow a local user to gain higher privileges. The description and connected records confirm the affected component is fcheck, with the underlyi...
CVE-2000-0910
Affected software: Horde library 1.02. Vulnerability: arbitrary commands can be executed via shell metacharacters in the from address. Root cause: lack of proper sanitization of shell metacharacters in the From field. Impact: potential remote code execution as implied by command execution in the ...
CVE-2000-0287
The BizDB CGI script bizdb-search.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the dbname parameter...
CVE-2000-0952
CVE-2000-0952 affects the Global CGI program, specifically global.cgi, in Global 3.55 and earlier on NetBSD. The vulnerability allows remote attackers to execute arbitrary commands via shell metacharacters in input handled by the CGI. Root cause: improper handling of shell input leading to comman...
CVE-2000-1068
The CVE-2000-1068 entry concerns Poll It 2.0: the pollit.cgi component is vulnerable to remote command execution via shell metacharacters supplied in the poll_options parameter. The underlying issue is improper handling of user-supplied input in that parameter, enabling an attacker to execute arb...
CVE-2000-0296
fcheck allows local users to gain privileges by embedding shell metacharacters into file names that are processed by fcheck...
CVE-2000-0252
The CVE-2000-0252 entry concerns the Dansie Shopping Cart (cart.pl/cart.cgi). An input in a form variable allows remote command execution through shell metacharacters, due to insufficient input sanitization. This yields the potential for arbitrary commands to be run on affected systems. Public re...