medium5.0Public exploit code
CVE-1999-0196
websendmail in Webgais 1.0 allows a remote user to access arbitrary files and execute arbitrary code via the receiver parameter ($VAR_receiver variable).
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- WEBgais 1.0 - websendmail Remote Command Execution1997-07-04 · remote · cgi · Verified
Impact
websendmail in Webgais 1.0 allows a remote user to access arbitrary files and execute arbitrary code via the receiver parameter ($VAR_receiver variable).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Webgais Development Team | Webgais | Version 1.0 |