Unscored CVE-2002-2365 EUVD-2002-2343GHSA-22mh-26gq-mrqg

Simple WAIS (SWAIS) 1.11 allows remote attackers to execute arbitrary commands via the shell metacharacters in the search field, as demonst…

Published Oct 31, 2007 · Updated Sep 17, 2024 · Assigned by mitre

Description

Simple WAIS (SWAIS) 1.11 allows remote attackers to execute arbitrary commands via the shell metacharacters in the search field, as demonstrated using the "|" (pipe) character.

References

20020630 Simple Wais 1.11 allows users to execute commands as SWAIS deamon. mailing-list
5127 vdb-entry
swais-command-execution(9453) vdb-entry