[eVuln] Guestex Shell Command Execution Vulnerability Feb 24 2006 07:57AM
alex evuln com
New eVuln Advisory:
Guestex Shell Command Execution Vulnerability

eVuln ID: EV0076
CVE: CVE-2006-0777
Software: Guestext
Sowtware's Web Site: http://www.teca-scripts.com/
Versions: 1.0
Critical Level: Dangerous
Type: Command Execution
Class: Remote
Status: Unpatched. No reply from developer(s)
Exploit: Available
Solution: Not Available
Discovered by: Aliaksandr Hartsuyeu (eVuln.com)

Vulnerable Script: guestex.pl

Variable $form{'email'} isn't properly sanitized. This can be used to execute arbitrary shell commands.

System access is possible.

Available at: http://evuln.com/vulns/76/exploit.html

No Patch available.

Discovered by: Aliaksandr Hartsuyeu (eVuln.com)

Aliaksandr Hartsuyeu
http://evuln.com - Penetration Testing Services

[ reply ]


Privacy Statement
Copyright 2010, SecurityFocus