Skip to content
OpenAdvisories
Unscored CVE-2002-1316 EUVD-2002-1300GHSA-gx3x-pcq5-hjcw

importInfo in the Admin Server for iPlanet WebServer 4.x, up to SP11, allows the web administrator to execute arbitrary commands via shell …

Published Nov 21, 2002 · Updated Aug 8, 2024 · Assigned by mitre

Description

importInfo in the Admin Server for iPlanet WebServer 4.x, up to SP11, allows the web administrator to execute arbitrary commands via shell metacharacters in the dir parameter, and possibly allows remote attackers to exploit this vulnerability via a separate XSS issue (CVE-2002-1315).

References