CVE-2005-1950
Webhints 1.03 - Remote Command Execution via Shell Metacharacters
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2005-1950. PoCs published by MadSheep, Alpha_Programmer.
AI-analyzed exploit summary This Perl script exploits a remote command execution vulnerability in WebHints Software's hints.cgi by injecting a reverse shell payload. It writes a malicious Perl script to /tmp and executes it to establish a reverse connection to the attacker's machine.
Description
hints.pl in Webhints 1.03 allows remote attackers to execute arbitrary commands via shell metacharacters in the argument.
Exploits (3)
This Perl script exploits a remote command execution vulnerability in WebHints Software's hints.cgi by injecting a reverse shell payload. It writes a malicious Perl script to /tmp and executes it to establish a reverse connection to the attacker's machine.
This exploit targets a command injection vulnerability in WebHints via the 'hints.pl' CGI script. It downloads and executes a backdoor from a remote server, then attempts to establish a reverse shell on port 4444.
This exploit targets a command injection vulnerability in WebHints by sending a crafted HTTP GET request to upload a file via the 'hints.pl' script. The PoC uses Winsock to establish a connection and execute the command injection.