邪恶八进制信息安全团队技术讨论组 » 重要安全公告{ Security Advisory Bulletin } » 漏洞分析[ Vulnerability Analyse ] » [转载]Affinity Path远程命令执行漏洞 [查看完整版本]

EvilOctal 2005-6-27 00:12

[转载]Affinity Path远程命令执行漏洞

文章作者：Affinity Path

Program Name:support_page.cgi v 1.6
An attacker may exploit this vulnerability to execute
commands on
the remote host by adding special parameters to
support_page.cgi script.

Proof Of Concept:
http://[target]/support_page.cgi?file_name=|command|

查看完整版本: [转载]Affinity Path远程命令执行漏洞

© 1999-2008 EvilOctal Security Team