Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
search.cgi in AGH HTMLsearch 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the template parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
AHG搜索程序Search.CGI可执行任意命令漏洞
Vulnerability Description
Search.CGI是HTMLsearch搜索引擎的一个程序,它由AHG分发,可以运行于各种系统。 由于脚本search.cgi没有彻底过滤用户的输入,造成远程攻击者可以执行任意的命令。 一个远程攻击者可以在搜索请求里加入分号(;)和管道符(|),而这些字符都不会被过滤掉,使的攻击者在搜索请求里夹带的命令能够以web服务器的权限执行。
CVSS Information
N/A
Vulnerability Type
N/A