Unscored CVE-2002-0306 EUVD-2002-0303GHSA-2gqg-8593-7cc7

ans.pl in Avenger's News System (ANS) 2.11 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in th…

Published May 3, 2002 · Updated Aug 8, 2024 · Assigned by mitre

Description

ans.pl in Avenger's News System (ANS) 2.11 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the p (plugin) parameter.

References

4149 vdb-entry
20020221 "Cthulhu xhAze" - Command execution in Ans.pl mailing-list