CVE-2003-0437

mnogosearch 3.2.10 - Remote Code Execution via Long tmplt Parameter

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2003-0437. PoCs published by pokleyzz.

AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in mnoGoSearch 3.1.20, allowing remote command execution as the webserver user on Linux ix86 systems. It uses a crafted HTTP request with shellcode to achieve RCE.

Description

Buffer overflow in search.cgi for mnoGoSearch 3.2.10 allows remote attackers to execute arbitrary code via a long tmplt parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED

by pokleyzz · perlremotelinux

https://www.exploit-db.com/exploits/41

View Code ZIP pw:eip

This exploit targets a buffer overflow vulnerability in mnoGoSearch 3.1.20, allowing remote command execution as the webserver user on Linux ix86 systems. It uses a crafted HTTP request with shellcode to achieve RCE.

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Moderate

Reliability

Reliable

Target: mnoGoSearch 3.1.20

No auth needed

Prerequisites: Target must be running mnoGoSearch 3.1.20 on Linux ix86 · Network access to the target web server

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1203 - Exploitation for Client Execution

devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (2)

Core 2

Core References

Exploit, Patch, Vendor Advisory vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/7866

Mailing List mailing-list x_refsource_fulldisc

http://lists.grok.org.uk/pipermail/full-disclosure/2003-June/005543.html

Scores

EPSS 0.0903

EPSS Percentile 94.6%

Details

Status published

Products (1)

mnogosearch/mnogosearch 3.2.10

Published Jul 24, 2003

Tracked Since Feb 18, 2026