Vulnerabilities > CVE-2001-0216 - Remote Command Execution vulnerability in Mnscu Pals Webpals 1.0
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
PARTIAL Availability impact
PARTIAL Summary
PALS Library System pals-cgi program allows remote attackers to execute arbitrary commands via shell metacharacters in the documentName parameter.
Vulnerable Configurations
Part | Description | Count |
---|---|---|
Application | 1 |
Exploit-Db
description | PALS Library System WebPALS 1.0 pals-cgi Arbitrary Command Execution. CVE-2001-0216. Remote exploit for cgi platform |
id | EDB-ID:20632 |
last seen | 2016-02-02 |
modified | 2001-02-02 |
published | 2001-02-02 |
reporter | cuctema |
source | https://www.exploit-db.com/download/20632/ |
title | PALS Library System WebPALS 1.0 pals-cgi Arbitrary Command Execution |
Nessus
NASL family | CGI abuses |
NASL id | PALS_CGI.NASL |
description | The |
last seen | 2020-06-01 |
modified | 2020-06-02 |
plugin id | 10611 |
published | 2001-02-13 |
reporter | This script is Copyright (C) 2001-2018 Tenable Network Security, Inc. |
source | https://www.tenable.com/plugins/nessus/10611 |
title | PALS Library System WebPALS pals-cgi Multiple Vulnerabilities |
code |
|