Support Us — Your donation helps us keep running

Goal: 1000 CNY，Raised: 1000 CNY

100.0%
Donate Now
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2001-1187
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
csvform.pl 0.1 allows remote attackers to execute arbitrary commands via metacharacters in the file parameter.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
CSVForm远程执行任意命令漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
CSVForm是一款基于*NIX平台的Perl CGI脚本，用于把表格输入的数据格式化为逗号分割的数据，然后保存到文本文件中，一般是为了后续的数据库导入而用。 该脚本存在一个输入验证漏洞，允许远程攻击者以Web Server身份执行任意命令。 这是由于"csvform.pl"没有对用户的输入的'file'变量进行过滤，然后直接交给open()函数处理的结果。 有问题的代码如下： sub modify_CSV { if(open(CSV，$_[0])){ } else{ goto &produce_erro
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
VendorProductAffected VersionsCPESubscribe
-n/a n/a -
II. Public POCs for CVE-2001-1187
#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC
III. Intelligence Information for CVE-2001-1187
Please Login to view more intelligence information
New Vulnerabilities
Product: n/a
Vendor: n/a
V. Comments for CVE-2001-1187

No comments yet

Leave a comment