high7.5Public exploit code
CVE-2004-2347
blog.cgi in Leif M.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Leif M. Wright Web Blog 1.1 - Remote Command Execution2004-01-31 · webapps · cgi · Verified
Impact
blog.cgi in Leif M. Wright Web Blog 1.1 and 1.1.5 allows remote attackers to execute arbitrary commands via shell metacharacters such as '|' in the file parameter of ViewFile requests.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Leif M. Wright | Web Blog | Versions 1.1, 1.1.5 |
References
- NVD record
- CVE.org record
- http://leifwright.com/scripts/Blog.html
- http://secunia.com/advisories/10776/
- http://www.osvdb.org/3793
- http://www.securityfocus.com/archive/1/352303
- http://www.securityfocus.com/bid/9539
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15019
- http://leifwright.com/scripts/Blog.html
- http://secunia.com/advisories/10776/
- http://www.osvdb.org/3793
- http://www.securityfocus.com/archive/1/352303
- http://www.securityfocus.com/bid/9539
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15019