CVE-1999-0935

Affected software: classifieds.cgi CGI script. Vulnerability: remote command execution by specifying arbitrary commands in a hidden CGI form variable. Root cause: implied lack of proper handling/sanitization of hidden form data (as described in PT-1999-1476 and CVE description). Impact: arbitrary...

CVE-1999-0935

classifieds.cgi allows remote attackers to execute arbitrary commands by specifying them in a hidden variable in a CGI form...