Description
wwwisis 3.45 and earlier allows remote attackers to execute arbitrary commands and read files via the parameters (1) prolog or (2) epilog.
References
- 20020402 RE: [VulnWatch] vuln in wwwisis: remote command execution and get files mailing-list
- 4384 vdb-entry
- 20020328 vuln in wwwisis: remote command execution and get files mailing-list
- 20020328 [VulnWatch] vuln in wwwisis: remote command execution and get files mailing-list
- wwwisis-remote-command-execution(8660) vdb-entry
- 4383 vdb-entry
- http://www.bireme.br/security.htm