Exploitation Summary
EIP tracks 1 public exploit for CVE-1999-0266. PoCs published by Niall Smart.
AI-analyzed exploit summary The exploit demonstrates command injection in the info2www script by passing malicious commands via the query string. It leverages improper input parsing to execute arbitrary commands with web server privileges.
Description
The info2www CGI script allows remote file access or remote command execution.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by Niall Smart · textremotecgi
https://www.exploit-db.com/exploits/20430
The exploit demonstrates command injection in the info2www script by passing malicious commands via the query string. It leverages improper input parsing to execute arbitrary commands with web server privileges.
Classification
Working Poc 90%
Attack Type
Rce
Complexity
Trivial
Reliability
Reliable
Target:
info2www (GNU EMACS Info Nodes)
No auth needed
Prerequisites:
Access to the vulnerable info2www CGI script
mistral-large-3 · analyzed Feb 16, 2026
Full analysis →
References (1)
Core 1
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/1995
Scores
EPSS
0.0945
EPSS Percentile
94.9%
Details
Status
published
Products (1)
roar_smith/info2www
Published
Mar 01, 1998
Tracked Since
Feb 18, 2026