CVE-2002-0749

CGIscript.net csmailto - Remote Code Execution via Form-Attachment Field

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2002-0749. PoCs published by Steve Gustin.

AI-analyzed exploit summary The exploit demonstrates command injection in CGIScript.NET csMailto by manipulating hidden form values in the URL. Arbitrary commands can be executed via the 'form-attachment' parameter, with optional email output redirection.

Description

CGIscript.net csMailto.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the form-attachment field.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Steve Gustin · textremotecgi

https://www.exploit-db.com/exploits/21415

View Code ZIP pw:eip

The exploit demonstrates command injection in CGIScript.NET csMailto by manipulating hidden form values in the URL. Arbitrary commands can be executed via the 'form-attachment' parameter, with optional email output redirection.

Classification

Working Poc 90%

Attack Type

Rce

Complexity

Trivial

Reliability

Reliable

Target: CGIScript.NET csMailto (unspecified version)

No auth needed

Prerequisites: Vulnerable CGIScript.NET csMailto installation · Network access to the target

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1059 - Command and Scripting Interpreter

devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (3)

Core 3

Core References

Vendor Advisory vdb-entry x_refsource_xf

http://www.iss.net/security_center/static/8930.php

Exploit, Vendor Advisory mailing-list x_refsource_bugtraq

http://archives.neohapsis.com/archives/bugtraq/2002-04/0326.html

Exploit, Vendor Advisory vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/4579

Scores

EPSS 0.1102

EPSS Percentile 95.3%

Details

Status published

Products (1)

cgiscript.net/csmailto

Published Aug 12, 2002

Tracked Since Feb 18, 2026