CVE-2001-1343

Description

ws_mail.cgi in WebStore 400/400CS 4.14 allows remote authenticated WebStore administrators to execute arbitrary code via shell metacharacters in the kill parameter.

Affected products

• cgicentral / webstore_4004.14 – 4.14
• cgicentral / webstore_400cs4.14 – 4.14

References

• MISChttp://archives.neohapsis.com/archives/bugtraq/2001-06/0142.html
• MISChttp://www.securityfocus.com/bid/2861
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/6685