Description
Bill Kendrick web site guestbook (GBook) allows remote attackers to execute arbitrary commands via shell metacharacters in the _MAILTO form variable.
References
- gbook-cgi-remote-execution(5509) vdb-entry
- 20001110 [hacksware] gbook.cgi remote command execution vulnerability mailing-list
- 1940 vdb-entry