5227 matches found
CVE-2000-0242
WindMail allows remote attackers to read arbitrary files or execute commands via shell metacharacters...
CVE-2000-0188
EZShopper 3.0’s search.cgi is vulnerable to directory traversal and command injection. Remote attackers can read arbitrary files via a .. path and may execute shell commands through metacharacters. The Nessus entry also mentions directory traversal in loadpage.cgi and possible arbitrary command e...
CVE-2000-0213
The Sambar server includes batch files ECHO.BAT and HELLO.BAT in the CGI directory, which allow remote attackers to execute commands via shell metacharacters...
CVE-2000-0177
CVE-2000-0177 concerns DNSTools CGI applications where remote attackers can execute arbitrary commands due to shell metacharacters. The issue is described across NVD and CVE records as enabling complete compromise (C, I, A) with network access and no authentication, yielding a very high risk (CVS...
CVE-2000-0213
The Sambar server is affected by CVE-2000-0213 due to batch files in the CGI directory (hello.bat and echo.bat) that allow remote attackers to execute commands via shell metacharacters. The Nessus plugin confirms these scripts enable arbitrary code execution with the web server’s privileges, iden...
CVE-2000-0188: Undefined Security Weakness
EZShopper 3.0 search.cgi CGI script allows remote attackers to read arbitrary files via a .. dot dot attack or execute commands via shell metacharacters...
CVE-2000-0213: Undefined Security Weakness
The Sambar server includes batch files ECHO.BAT and HELLO.BAT in the CGI directory, which allow remote attackers to execute commands via shell metacharacters...
CVE-2000-0187: Undefined Security Weakness
EZShopper 3.0 loadpage.cgi CGI script allows remote attackers to read arbitrary files via a .. dot dot attack or execute commands via shell metacharacters...
CVE-2000-0177: Undefined Security Weakness
DNSTools CGI applications allow remote attackers to execute arbitrary commands via shell metacharacters...
CVE-2000-0177
DNSTools CGI applications allow remote attackers to execute arbitrary commands via shell metacharacters...
CVE-2000-0207
SGI InfoSearch CGI program infosrch.cgi allows remote attackers to execute commands via shell metacharacters...
CVE-2000-0213
The Sambar server includes batch files ECHO.BAT and HELLO.BAT in the CGI directory, which allow remote attackers to execute commands via shell metacharacters...
CVE-2000-0141
Infopop Ultimate Bulletin Board UBB allows remote attackers to execute commands via shell metacharacters in the topic hidden field...
PT-2000-1126 · Infopop · Infopop Ultimate Bulletin Board
Name of the Vulnerable Software and Affected Versions: Infopop Ultimate Bulletin Board UBB affected versions not specified Description: The issue allows remote attackers to execute commands by injecting shell metacharacters into the topic hidden field. Recommendations: At the moment, there is no...
CVE-1999-0983
The CVE-1999-0983 entry concerns the Whois Internic Lookup program’s whois.cgi, where the domain field accepts input that can be manipulated with shell metacharacters to execute commands remotely. Public sources in the connected documents confirm the vulnerability involves remote command executio...
CVE-2000-0035
resend command in Majordomo allows local users to gain privileges via shell metacharacters...
CVE-2000-0035
CVE-2000-0035 : The vulnerability involves Majordomo’s resend command that allows local users to gain privileges via shell metacharacters. This is a local-privilege issue with the root cause being unsafely handled shell metacharacters in the resend logic. The NVD entry lists a CVSSv2 base score o...
CVE-1999-0984
Matt's Whois program whois.cgi is vulnerable to remote command execution via shell metacharacters in the domain field. The root cause is unsanitized input in the domain entry. Affected: Matt's Whois program whois.cgi (versions not specified). Impact: arbitrary commands executed on the server. Exp...