Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Linux Directory Penguin NsLookup CGI script (nslookup.pl) 1.0 allows remote attackers to execute arbitrary code via shell metacharacters in the (1) query or (2) type parameters.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Linux Directory Penguin nslookup远程命令执行漏洞
Vulnerability Description
Penguin nslookup.pl是一款由perl语言实现在WEB接口下提供域名搜索的程序，由Linux Directory开发和维护。 Penguin nslookup.pl由于在执行traceroute程序时没有充分过滤输入，可导致攻击者以httpd权限执行任意命令。 Penguin nslookup.pl没有对用户输入的内容进行充分过滤，攻击者可以输入元字符";"并再后面追加任意命令，可导致攻击者可以以httpd的权限执行任意命令。
CVSS Information
N/A
Vulnerability Type
N/A