PT-1998-1158 · Hamcards · Hamcards Postcard Cgi Script

Publicado 1998-11-09 · Atualizado 2017-12-19 · CVE-1999-1153

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions HAMcards Postcard CGI script version 1.0

Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in the recipient email address. This can lead to unauthorized access and control of the system.

Recommendations For HAMcards Postcard CGI script version 1.0, consider restricting or sanitizing input for the recipient email address to prevent the execution of arbitrary commands until a patch is available. As a temporary workaround, restrict access to the CGI script to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-1999-1153

Produtos afetados

Hamcards Postcard Cgi Script

Referências · 3

• 🔥 http://securityfocus.com/archive/1/11175 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/1400 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-1999-1153 · Nota de Segurança