high7.5Public exploit code
CVE-2001-1343
ws_mail.cgi in WebStore 400/400CS 4.14 allows remote authenticated WebStore administrators to execute arbitrary code via shell metacharacters in the kill param…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- cgiCentral WebStore 400 - Arbitrary Command Execution2001-05-06 · remote · cgi · Verified
Impact
ws_mail.cgi in WebStore 400/400CS 4.14 allows remote authenticated WebStore administrators to execute arbitrary code via shell metacharacters in the kill parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cgicentral | Webstore 400 | Version 4.14 |
| Cgicentral | Webstore 400cs | Version 4.14 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2001-06/0142.html
- http://www.securityfocus.com/bid/2861
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6685
- http://archives.neohapsis.com/archives/bugtraq/2001-06/0142.html
- http://www.securityfocus.com/bid/2861
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6685