CVE-2002-0749

Description

CGIscript.net csMailto.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the form-attachment field.

Affected products

• cgiscript.net / csmailto

References

• MISChttp://www.iss.net/security_center/static/8930.php
• MISChttp://archives.neohapsis.com/archives/bugtraq/2002-04/0326.html
• MISChttp://www.securityfocus.com/bid/4579