Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
csGuestbook.cgi in CGISCRIPT.NET csGuestbook 1.0 allows remote attackers to execute arbitrary Perl code via the setup parameter, which is processed by the Perl eval function.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
CSGuestbook可远程执行任意命令漏洞
Vulnerability Description
csGuestbook是一款基于WEB的留言本程序，运行在多种Unix和Linux系统下，也可运行在Microsoft Windows操作系统下。 csGuestbook对用户在URL的输入没有正确充分的过滤，可导致远程攻击者以Web进程的权限在目标系统上执行任意命令。 csGuestbook由于访问验证错误，任意用户可以在URL上提供PERL代码作为配置数据来写入到"setup.cgi"文件中，并在服务器上以Web进程的权限执行这些PERL代码。 注意用户提供的任何PERL代码必须转换为URL编码形式。
CVSS Information
N/A
Vulnerability Type
N/A