high7.5Public exploit code
CVE-2005-0689
includer.cgi in The Includer allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the URL or (2) the template parameter.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- The Includer CGI 1.0 - Remote Command Execution (3)2005-04-08 · webapps · cgi · Verified
- The Includer CGI 1.0 - Remote Command Execution (2)2005-04-08 · webapps · cgi · Verified
- The Includer CGI 1.0 - Remote Command Execution (1)2005-03-07 · webapps · cgi · Verified
Impact
includer.cgi in The Includer allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the URL or (2) the template parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jimmy | The Includer | Versions 1.0, 1.1 |