VulnerabilityModified
CVE-2002-1993
webbbs_post.pl in WebBBS 4 and 5.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the followup parameter.
HIGH 10.0EPSS 11.9%
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 11.9%, higher than 96% of all known CVEs. Patch or mitigate before the next change window.
Description
webbbs_post.pl in WebBBS 4 and 5.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the followup parameter.
- CVSS 2.0
- 10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C
- EPSS
- 11.88% probability · 96th percentile
- CISA KEV
- Not listed
- Affected
- affordable web space design/affordable web space design webbbs
- Source
- cve@mitre.org
References
- http://cert.uni-stuttgart.de/archive/bugtraq/2002/06/msg00232.html
- http://www.iss.net/security_center/static/9378.php
- http://www.securityfocus.com/bid/5048Exploit
- http://cert.uni-stuttgart.de/archive/bugtraq/2002/06/msg00232.html
- http://www.iss.net/security_center/static/9378.php
- http://www.securityfocus.com/bid/5048Exploit
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.