FileSeek.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) head or (2) foot parameters.
Link | Tags |
---|---|
http://www.iss.net/security_center/static/8857.php | vdb entry patch vendor advisory |
http://archives.neohapsis.com/archives/vuln-dev/2002-q2/0132.html | mailing list exploit patch vendor advisory |