Published: 31/12/2004 Updated: 11/07/2017

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 755

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

blog.cgi in Leif M. Wright Web Blog 1.1 and 1.1.5 allows remote malicious users to execute arbitrary commands via shell metacharacters such as '|' in the file parameter of ViewFile requests.

Vulnerable Product	Search on Vulmon	Subscribe to Product
leif m. wright web blog 1.1
leif m. wright web blog 1.1.5

source: wwwsecurityfocuscom/bid/9539/info Web Blog has been reported to be prone to a vulnerability that may permit remote attackers to execute arbitrary commands in the context of the hosting web server This is due to insufficient sanitization of shell metacharacters from variables which will be used as an argument to a function that in ...

NVD-CWE-Other http://www.securityfocus.com/archive/1/352303 http://www.securityfocus.com/bid/9539 http://secunia.com/advisories/10776/http://leifwright.com/scripts/Blog.html http://www.osvdb.org/3793 https://exchange.xforce.ibmcloud.com/vulnerabilities/15019 https://nvd.nist.gov https://www.exploit-db.com/exploits/23629/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2004-2347

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect