source: wwwsecurityfocuscom/bid/1995/info
The info2www script allows HTTP access to information stored in GNU EMACS Info Nodes This script fails to properly parse input and can be used to execute commands on the server with permissions of the web server, by passing commands as part of a variable Potential consequences of a successful ex ...