Description
csvform.pl 0.1 allows remote attackers to execute arbitrary commands via metacharacters in the file parameter.
References
- csvform-cgi-execute-commands(7692) vdb-entry
- 3668 vdb-entry
- 20011211 CSVForm (Perl CGI) Remote Execution Vulnerability mailing-list