Description
CGIScript.net csNews.cgi allows remote authenticated users to execute arbitrary Perl code via terminating quotes and metacharacters in text fields of the "Advanced Settings" capability.
References
- 4451 vdb-entry
- 20020611 CGIscript.net - csNews.cgi - Multiple Vulnerabilities mailing-list