Vulnerabilities > CVE-2001-0844 - Remote Arbitrary Command Execution vulnerability in Seth Leonard Book of Guests and Post IT

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
seth-leonard

Summary

Vulnerability in (1) Book of guests and (2) Post it! allows remote attackers to execute arbitrary code via shell metacharacters in the email parameter.

Vulnerable Configurations

Part Description Count
Application
Seth_Leonard
2