CVEブラウザに戻る

CVE-2001-0023

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0190%

EPSS Percentile28.21th

Published2001年2月12日

Last Modified2026年4月16日

Vulnerability Description

everythingform.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the config parameter.

Affected Platforms (CPE)

📦

Leif M. Wright

Everythingform.cgi

= 2.0

References & Advisories

🔗 http://archives.neohapsis.com/archives/bugtraq/2000-12/0137.html

🔗 http://www.securityfocus.com/bid/2101

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/5736

🔗 http://archives.neohapsis.com/archives/bugtraq/2000-12/0137.html

🔗 http://www.securityfocus.com/bid/2101

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/5736

関連する脆弱性情報

CVE-2001-007610.0

register.cgi in Ikonboard 2.1.7b and earlier allows remote attackers to execute arbitrary commands via the SEND_MAIL parameter, wh...

CVE-2001-009810.0

Buffer overflow in Bea WebLogic Server before 5.1.0 allows remote attackers to execute arbitrary commands via a long URL that begi...

CVE-2001-007010.0

Buffer overflow in 1st Up Mail Server 4.1 allows remote attackers to cause a denial of service, and possibly execute arbitrary com...

CVE-2001-009910.0

bsguest.cgi guestbook script allows remote attackers to execute arbitrary commands via shell metacharacters in the email address.