Vulnerability in Cgicentral Webstore 400

CVE-2001-1343

ws_mail.cgi in WebStore 400/400CS 4.14 allows remote authenticated WebStore administrators to execute arbitrary code via shell metacharacters in the kill parameter.

EPSS: 0.098 (95.1th percentile) — read the EPSS interpretation.

Affected products

Cgicentral Webstore_400 — versions 4.14
Cgicentral Webstore_400cs — versions 4.14
N/a — versions n/a

References

cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (Exploit, Patch, vdb-entry, x_refsource_BID, Vendor Advisory)
cve@mitre.org (vdb-entry, x_refsource_XF)