CVE-2002-2420

Published: 31/12/2002 Updated: 05/09/2008

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 755

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

site_searcher.cgi in Super Site Searcher allows remote malicious users to execute arbitrary commands via shell metacharacters in the page parameter.

Vulnerable Product	Search on Vulmon	Subscribe to Product
independent solution simple site searcher
independent solution super site searcher

source: wwwsecurityfocuscom/bid/5605/info Super Site Searcher is prone to remote command execution Shell metacharacters are not adequately filtered from query string parameters in a request to the vulnerable search engine script The parameters are then used in a function which passes commands directly through the shell A remote attack ...

The New Exploit there no available on metasploit framework !

CVE-2002-2420 The New Exploit there no available on metasploit framework !

CWE-20 http://www.securityfocus.com/bid/5605 http://securitytracker.com/id?1005190 https://nvd.nist.gov https://github.com/krdsploit/CVE-2002-2420 https://www.exploit-db.com/exploits/21768/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2002-2420

Vulnerability Summary

Exploits

Github Repositories

References

Vulmon Search

About

Products

Connect