critical10.0Public exploit code
CVE-2000-0690
Auction Weaver CGI script 1.02 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the fromfile parameter.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- CGI Script Center Auction Weaver 1.0.2 - Remote Command Execution2000-08-30 · remote · cgi · Verified
Impact
Auction Weaver CGI script 1.02 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the fromfile parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cgi Script Center | Auction Weaver | Versions 1.0, 1.02 |