CVE-2002-1316

importInfo in the Admin Server for iPlanet WebServer 4.x, up to SP11, allows the web administrator to execute arbitrary commands via shell metacharacters in the dir parameter, and possibly allows remote attackers to exploit this vulnerability via a separate XSS issue CVE-2002-1315...

CVE-2002-1316

CVE-2002-1316 affects iPlanet WebServer 4.x (Admin Server) up to Service Pack 11, where the dir parameter can be manipulated with shell metacharacters to execute arbitrary commands. This vulnerability, reported alongside CVE-2002-1315 (XSS), enables potential unauthorized command execution and pa...