Skip to content
OpenAdvisories

Weakness (CWE)

CWE-553: Command Shell in Externally Accessible Directory

Variant Incomplete

A possible shell file exists in /cgi-bin/ or other accessible directories. This is extremely dangerous and can be used by an attacker to execute commands on the web server.

How to prevent it (1 mitigation)

  1. Installation, System Configuration

    Remove any Shells accessible under the web root folder and children directories.

Source: MITRE CWE-553

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.0
    CVE-2025-66620

    Columbia Weather Systems MicroServer Command Shell in Externally Accessible Directory

    An unused webshell in MicroServer allows unlimited login attempts, with sudo rights on certain files and directories. An attacker with admin access to MicroServer can gain limited shell access, enabling persistence through reverse shells, and the ability to m…

    Columbia Weather Systems MicroServer