20010618 udirectory from Microburst Technologies remote command executionmailing list
http://www.securityfocus.com/archive/1/191829 CVE-2001-1160
Microburst uDirectory 2.0 - Remote Command Execution
Record summary
CVE-2001-1160 has a selected CVSS score of 7.5; EIP currently links 1 catalogued exploit.
Description
udirectory.pl in Microburst Technologies uDirectory 2.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the category_file field.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBMicroburst uDirectory 2.0 - Remote Command ExecutionExploitDB exploitby Igor DobrovitskiNot analyzed1 file
References
42884vdb entry
http://www.securityfocus.com/bid/2884 udirectory-remote-command-execution(6706)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/6706 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2001-1160