critical10.0Public exploit code
CVE-2000-0010
WebWho+ whois.cgi program allows remote attackers to execute commands via shell metacharacters in the TLD parameter.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Tony Greenwood WebWho+ 1.1 - Remote Command Execution1999-12-26 · remote · multiple · Verified
Impact
WebWho+ whois.cgi program allows remote attackers to execute commands via shell metacharacters in the TLD parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tony Greenwood | Webwho\+ | Version 1.1 |