CVE-2001-0022

simplestguest.cgi - RCE

Title source: llm

Description

simplestguest.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the guestbook parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED

by suid · htmlremotecgi

https://www.exploit-db.com/exploits/20506

View Code ZIP pw:eip

References (3)

[Vendor Advisory] http://www.securityfocus.com/bid/2106

[Exploit, Vendor Advisory] http://archives.neohapsis.com/archives/bugtraq/2000-12/0168.html

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/5743

Scores

EPSS 0.0540

EPSS Percentile 90.1%

Details

Status published

Products (1)

leif_m._wright/simplestguest.cgi 2.0

Published Feb 12, 2001

Tracked Since Feb 18, 2026