critical10.0Public exploit code
CVE-2002-1868
Dispair 0.1 and 0.2 allows remote attackers to execute arbitrary shell commands via certain form fields.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Dispair 0.1/0.2 - Remote Command Execution2002-07-30 · webapps · cgi · Verified
Impact
Dispair 0.1 and 0.2 allows remote attackers to execute arbitrary shell commands via certain form fields.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Daniel Stenberg | Dispair | Versions 0.1, 0.2 |
References
- NVD record
- CVE.org record
- http://www.contactor.se/~dast/dispair/dispair.cgi?file=dispair-0.3.tar.gz&dir=&view=CHANGES
- http://www.iss.net/security_center/static/9787.php
- http://www.securityfocus.com/bid/5392
- http://www.contactor.se/~dast/dispair/dispair.cgi?file=dispair-0.3.tar.gz&dir=&view=CHANGES
- http://www.iss.net/security_center/static/9787.php
- http://www.securityfocus.com/bid/5392