high7.5Public exploit code
CVE-2005-1950
hints.pl in Webhints 1.03 allows remote attackers to execute arbitrary commands via shell metacharacters in the argument.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Webhints 1.03 - Remote Command Execution (Perl) (3)2005-06-11 · webapps · cgi · Verified
- Webhints 1.03 - Remote Command Execution (C) (2)2005-06-11 · webapps · cgi · Verified
- Webhints 1.03 - Remote Command Execution (Perl) (1)2005-06-11 · webapps · cgi · Verified
Impact
hints.pl in Webhints 1.03 allows remote attackers to execute arbitrary commands via shell metacharacters in the argument.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Darryl Burgdorf | Webhints | Version 1.3 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=111842893001406&w=2
- http://secunia.com/advisories/15652
- http://securitytracker.com/id?1014173
- http://www.securityfocus.com/bid/13930
- http://marc.info/?l=bugtraq&m=111842893001406&w=2
- http://secunia.com/advisories/15652
- http://securitytracker.com/id?1014173
- http://www.securityfocus.com/bid/13930