Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
CDomain whois_raw.cgi whois CGI script allows remote attackers to execute arbitrary commands via shell metacharacters in the fqdn parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
CDomainFree远程可执行任意命令漏洞
Vulnerability Description
CdomainFree是一个商业的CGI软件包,用于提供基于Web的Whois查询服务。 CdomainFree 2.5免费版以前版本实现上存在一个输入验证漏洞,远程攻击者可能利用此漏洞以Web服务进程的权限在主机上执行任意命令。 漏洞存在于whois_raw.cgi脚本,它对用户输入未做充分过滤,远程攻击者可能在输入里插入某些shell转义字符比如"|"来执行任意命令。此漏洞影响whois_raw.cgi v1.x和cdomain.pl2.0到2.4版本的程序。新版软件不受影响,因它们直接连接到Whoi
CVSS Information
N/A
Vulnerability Type
N/A