7.5
CVSSv2

CVE-2002-2113

Published: 31/12/2002 Updated: 05/09/2008
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

search.cgi in AGH HTMLsearch 1.0 allows remote malicious users to execute arbitrary commands via shell metacharacters in the template parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

agh htmlsearch 1.0

Exploits

source: wwwsecurityfocuscom/bid/3985/info SearchCGI is a component of the HTMLsearch Search Engine software distributed by AHG The software is available for the Unix, Linux, and Microsoft platforms The searchcgi script included with the AHG Search Engine does not adequately filter input Due to lack of sufficient input sanitization, ...