Arbitrary Command Execution in WebLibs 1.0 via TextFile Parameter

Arbitrary Command Execution in WebLibs 1.0 via TextFile Parameter

CVE-2004-1222 · HIGH Severity

AV:N/AC:L/AU:N/C:C/I:C/A:C

weblibs.pl in WebLibs 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the TextFile parameter.

Learn more about our Web Application Penetration Testing UK.