Vulnerability in Bill Kendrick Gbook.cgi

CVE-2000-1131

Bill Kendrick web site guestbook (GBook) allows remote attackers to execute arbitrary commands via shell metacharacters in the _MAILTO form variable.

EPSS: 0.034 (87.7th percentile) — read the EPSS interpretation.

Affected products

Bill_kendrick Gbook.cgi — versions 1.0
N/a — versions n/a

References

cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (Patch, vdb-entry, x_refsource_BID, Vendor Advisory)