2 matches found
bsguest.cgi Guestbook Email Address Variable Arbitrary Command Execution
Binary data 1644.prm...
CVE-2001-0099
CVE-2001-0099 concerns the bsguest.cgi guestbook script. The issue allows a remote attacker to execute arbitrary commands by supplying shell metacharacters in the email address field, enabling a direct command-execution path via the web server. This vulnerability is evidenced across multiple sour...