|
Family: CGI abuses --> Category: infos
uploader.exe Vulnerability Scan
Vulnerability Scan Summary Searches for the existence of /cgi-win/uploader.exe
Detailed Explanation for this Vulnerability Test
Synopsis :
The remote web server contains a CGI script that is prone to arbitrary
command execution.
Description :
The remote web server contains a CGI script named 'uploader.exe' in
'/cgi-win'. Versions of O'Reilly's Website product before 1.1g
included a script with this name that allows a possible hacker to upload
arbitrary CGI and then execute them.
See also :
http://www.nessus.org/u?4b667852
http://www.nessus.org/u?3bca098f
Solution :
Verify that the affected script does not allow arbitrary uploads and
remove it if it does.
Threat Level:
High / CVSS Base Score : 7
(AV:R/AC:L/Au:NR/C:P/A:P/I:P/B:N)
Click HERE for more information and discussions on this network vulnerability scan.
|