CVE-2002-2113

high7.5Public exploit code

CVE-2002-2113

search.cgi in AGH HTMLsearch 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the template parameter.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

AHG Search Engine 1.0 - 'search.cgi' Arbitrary Command Execution2002-01-29 · webapps · cgi · Verified

Impact

search.cgi in AGH HTMLsearch 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the template parameter.

Affected products

Vendor	Product	Affected versions
Agh	Htmlsearch	Version 1.0