PT-1998-1158 · Hamcards · Hamcards Postcard Cgi Script

Published 1998-11-09 · Updated 2017-12-19 · CVE-1999-1153

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions HAMcards Postcard CGI script version 1.0

Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in the recipient email address. This can lead to unauthorized access and control of the system.

Recommendations For HAMcards Postcard CGI script version 1.0, consider restricting or sanitizing input for the recipient email address to prevent the execution of arbitrary commands until a patch is available. As a temporary workaround, restrict access to the CGI script to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-1999-1153

Affected Products

Hamcards Postcard Cgi Script

References · 3

• 🔥 http://securityfocus.com/archive/1/11175 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-1999-1153 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/1400 · Note