CVE-2000-0010

WebWho+ - Remote Command Execution via TLD Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2000-0010. PoCs published by loophole.

AI-analyzed exploit summary This exploit targets a command injection vulnerability in WebWho+ v1.1 by sending a maliciously crafted POST request to the 'type' parameter, allowing arbitrary command execution with the web server's privileges. The script uses Perl and IO::Socket to interact with the vulnerable CGI script.

Description

WebWho+ whois.cgi program allows remote attackers to execute commands via shell metacharacters in the TLD parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED
by loophole · perlremotemultiple
https://www.exploit-db.com/exploits/19691

This exploit targets a command injection vulnerability in WebWho+ v1.1 by sending a maliciously crafted POST request to the 'type' parameter, allowing arbitrary command execution with the web server's privileges. The script uses Perl and IO::Socket to interact with the vulnerable CGI script.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Trivial
Reliability
Reliable
Target: WebWho+ v1.1
No auth needed
Prerequisites: Target server running WebWho+ v1.1 · Network access to the vulnerable CGI script
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (1)

Core 1
Core References
Third Party Advisory, VDB Entry x_refsource_misc
https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0010

Scores

EPSS 0.1107
EPSS Percentile 95.4%

Details

Status published
Products (1)
tony_greenwood/webwho\+ 1.1
Published Dec 26, 1999
Tracked Since Feb 18, 2026