CNCVE编号:CNCVE-20010023 CVE编号:CAN-2001-0023 安全级别:高 漏洞中文描述: Leif Wright的everythingform.cgi CGI程序允许远程攻击者通过在config参数中的shell字符段来执行任意命令。 漏洞英文描述: everythingform.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the config parameter. 漏洞参考: BID:2101 XF:http-cgi-everythingform BUGTRAQ:20001211 Insecure input validation in everythingform.cgi (remote command execution) 系统类型:其他 漏洞类型:权限有效性检查错误