high7.5Public exploit code
CVE-1999-0262
Hylafax faxsurvey CGI script on Linux allows remote attackers to execute arbitrary commands via shell metacharacters in the query string.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Hylafax 4.0 pl2 Faxsurvey - Remote Command Execution1998-08-04 · remote · unix · Verified
Impact
Hylafax faxsurvey CGI script on Linux allows remote attackers to execute arbitrary commands via shell metacharacters in the query string.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Renaud Deraison | Faxsurvey | All versions |