critical9.8
CVE-2004-2776
go.cgi in GoScript 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) query string or (2) artarchive parameter.
Impact
go.cgi in GoScript 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) query string or (2) artarchive parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Goscript Project | Goscript | Version 2.0 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=109164242705572&w=2
- http://openwall.com/lists/oss-security/2013/12/12/8
- https://github.com/mikaku/Monitorix/issues/30
- http://marc.info/?l=bugtraq&m=109164242705572&w=2
- http://openwall.com/lists/oss-security/2013/12/12/8
- https://github.com/mikaku/Monitorix/issues/30