WebBBS webbbs_config.pl followup Parameter Command Execution - Ver2 (CVE-2002-1993)

A command execution vulnerability has been reported in WebBBS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

CVE-2002-1993

The CVE-2002-1993 entry affects WebBBS 4 and 5.0, where webbbs_post.pl fails to sanitize shell metacharacters in the followup parameter, enabling remote command execution. The underlying issue is improper handling of shell commands, allowing an attacker to run arbitrary commands on the affected s...

CVE-2002-1993

webbbspost.pl in WebBBS 4 and 5.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the followup parameter...