CVE-2005-1628
Web-app.org Webapp - Improper Input Validation
Title source: ruleDescription
apage.cgi in WebAPP 0.9.9.2.1, and possibly earlier versions, allows remote attackers to execute arbitrary commands via shell metacharacters in the f parameter.
Exploits (2)
exploitdb
WORKING POC
VERIFIED
by Alpha_Programmer · perlwebappscgi
https://www.exploit-db.com/exploits/1005
References (6)
Scores
EPSS
0.1737
EPSS Percentile
95.1%
Details
CWE
CWE-20
Status
published
Products (3)
web-app.org/webapp
0.9.9
web-app.org/webapp
0.9.9.2
web-app.org/webapp
0.9.9.2.1
Published
May 17, 2005
Tracked Since
Feb 18, 2026