CVE-2003-0243

CVE-2003-0243 affects Happycgi Happymall 4.3/4.4. The normal_html.cgi and member_html.cgi scripts pass user input to shell operations without proper filtering, enabling remote arbitrary OS command execution via crafted file parameters. Impact: remote code execution with web server privileges. Exp...

CVE-2003-0243

Happycgi.com Happymall 4.3 and 4.4 allows remote attackers to execute arbitrary commands via shell metacharacters in the file parameter for the 1 normalhtml.cgi or 2 memberhtml.cgi scripts...

unhappycgi.txt

Advisory URL: http://securitytracker.com/alerts/2003/May/1006707.html Vendor: Happycgi.com Product: Happymall Versions: 4.3, 4.4 Title: Happymall E-Commerce Input Validation Flaw Lets Remote Users Execute Arbitrary Commands Description: Revin Aldi reported an input validation vulnerability in the...

HappyMall E-Commerce Software 4.3/4.4 - 'Member_HTML.cgi' Command Execution

source: https://www.securityfocus.com/bid/7530/info It has been reported that a problem in the HappyMall E-Commerce software package could allow an attacker to pass arbitrary commands through the memberhtml.cgi script. This could lead to attacks against system resources. HappyMall explo vulnerabl...

HappyMall E-Commerce Software 4.34.4 - Member_HTML.cgi Command Execution

HappyMall E-Commerce Software 4.34.4 - MemberHTML.cgi Command Execution source: https://www.securityfocus.com/bid/7530/info It has been reported that a problem in the HappyMall E-Commerce software package could allow an attacker to pass arbitrary commands through the memberhtml.cgi script. This...

HappyMall Multiple Script Arbitrary Command Execution

There is a flaw HappyMall that could allow an attacker to execute arbitrary commands with the privileges of the HTTP daemon typically root or nobody, by making a request like : /shop/normalhtml.cgi?file=|id| In addition, memberhtml.cgi has been reported vulnerable. However, Nessus has not checked...

HappyMall E-Commerce Software 4.34.4 - Normal_HTML.cgi Command Execution

HappyMall E-Commerce Software 4.34.4 - NormalHTML.cgi Command Execution source: https://www.securityfocus.com/bid/7529/info It has been reported that a problem in the HappyMall E-Commerce software package could allow an attacker to pass arbitrary commands through the normalhtml.cgi script. This...

HappyMall E-Commerce Software 4.3/4.4 - 'Normal_HTML.cgi' Command Execution

source: https://www.securityfocus.com/bid/7529/info It has been reported that a problem in the HappyMall E-Commerce software package could allow an attacker to pass arbitrary commands through the normalhtml.cgi script. This could lead to attacks against system resources. HappyMail explo vulnerabl...