dcboard.cgi in DCForum 2000 1.0 allows remote attackers... · CVE-2001-0436 · GitHub Advisory Database · GitHub

dcboard.cgi in DCForum 2000 1.0 allows remote attackers...

High severity Unreviewed Published Apr 30, 2022 to the GitHub Advisory Database • Updated Jan 30, 2023

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

dcboard.cgi in DCForum 2000 1.0 allows remote attackers to execute arbitrary commands by uploading a Perl program to the server and using a .. (dot dot) in the AZ parameter to reference the program.

References

Published by the National Vulnerability Database

Jul 2, 2001

Published to the GitHub Advisory Database Apr 30, 2022

Last updated Jan 30, 2023