10
CVSSv2

CVE-2001-0025

Published: 12/02/2001 Updated: 19/12/2017
CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10
VMScore: 1000
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

ad.cgi CGI program by Leif Wright allows remote malicious users to execute arbitrary commands via shell metacharacters in the file parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

leif m. wright ad.cgi 1.0

Exploits

source: wwwsecurityfocuscom/bid/2103/info adcgi is an ad rotation script freely available, and written by Leif Wright A problem exists in the script which may allow access to restricted resources The problem occurs in the method in which the script checks input Due to insufficent validation of input, the script allows a user to execu ...