high7.5Public exploit code
CVE-2001-0461
template.cgi in Free On-Line Dictionary of Computing (FOLDOC) allows remote attackers to read files and execute commands via shell metacharacters in the argume…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Free Online Dictionary of Computing 1.0 - Remote File Viewing2001-03-09 · remote · cgi · Verified
Impact
template.cgi in Free On-Line Dictionary of Computing (FOLDOC) allows remote attackers to read files and execute commands via shell metacharacters in the argument to template.cgi.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Denis Howe | Foldoc | All versions |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2001-03/0109.html
- http://wombat.doc.ic.ac.uk/foldoc/index.html
- http://www.osvdb.org/5591
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6217
- http://archives.neohapsis.com/archives/bugtraq/2001-03/0109.html
- http://wombat.doc.ic.ac.uk/foldoc/index.html
- http://www.osvdb.org/5591
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6217