PT-2002-3132 · Unknown · Super Site Searcher

Published 2002-12-31 · Updated 2008-09-05 · CVE-2002-2420

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Super Site Searcher (affected versions not specified)

Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in the page parameter of the site searcher.cgi script.

Recommendations For all affected versions, consider restricting access to the site searcher.cgi script until a patch is available. As a temporary workaround, avoid using shell metacharacters in the page parameter to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2002-2420

Affected Products

Super Site Searcher

References · 4

• 🔥 https://exploit-db.com/exploits/21768 · Exploit
• 🔥 http://securitytracker.com/id?1005190 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2002-2420 · Security Note
• http://securityfocus.com/bid/5605 · Note