NetSight
IP …
high7.5

CVE-2000-1131

Bill Kendrick web site guestbook (GBook) allows remote attackers to execute arbitrary commands via shell metacharacters in the _MAILTO form variable.

Impact

Bill Kendrick web site guestbook (GBook) allows remote attackers to execute arbitrary commands via shell metacharacters in the _MAILTO form variable.

Affected products

VendorProductAffected versions
Bill KendrickGbook.Cgi
Version 1.0

References