Nessus Plugin #10775

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

E-Shopping Cart Arbitrary Command Execution (WebDiscount)

Family:

CGI abuses

Category:

infos

Copyright:

This script is Copyright (C) 2001 SecuriTeam

Summary:

E-Shopping Cart Arbitrary Command Execution (WebDiscount)

Version:

$Revision: 1.15 $

Cve_id:

CAN-2001-1014

Bugtraq_id:

3340

Xrefs:

-

Description:

The eShop (WebDiscount) CGI is installed. A security problem in this CGI
allows anyone to execute arbitrary commands with the privileges of the
web server.

Solution: Contact the author for a patch.
Risk factor : High

Additional information:
http://www.securiteam.com/unixfocus/5JP0M005FU.html