PT-2002-3132 · Unknown · Super Site Searcher

Publicado 2002-12-31 · Atualizado 2008-09-05 · CVE-2002-2420

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Super Site Searcher (affected versions not specified)

Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in the page parameter of the site searcher.cgi script.

Recommendations For all affected versions, consider restricting access to the site searcher.cgi script until a patch is available. As a temporary workaround, avoid using shell metacharacters in the page parameter to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2002-2420

Produtos afetados

Super Site Searcher

Referências · 4

• 🔥 https://exploit-db.com/exploits/21768 · Exploit
• 🔥 http://securitytracker.com/id?1005190 · Exploit
• http://securityfocus.com/bid/5605 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-2420 · Nota de Segurança