CVE-2001-0099 bsguest.cgi guestbook script allows remote attackers to execute arbitrary commands via shell metacharacters in the email address.

HighCVSS 10.0 EPSS 13.3%

Published: 2001-05-07 07:00
Updated: 2026-06-17 00:53
Exploit status: No public exploit known

Sign in for asset impact Search another CVE

Description

bsguest.cgi guestbook script allows remote attackers to execute arbitrary commands via shell metacharacters in the email address.

Affected products

Product	Affected versions	Fixed in
brian stanback bsguest.cgi	All versions	No fix listed

References

20001221 BS Scripts Vulnerabilities exploit mailing-list patch vendor-advisory
www.stanback.net patch
bsguest-cgi-execute-commands(5796) vdb-entry

CVSS v2.0

10.0 High

AV:N/AC:L/Au:N/C:C/I:C/A:C

Access Vector: Network
Access Complexity: Low
Authentication: None
Confidentiality: Complete
Integrity: Complete
Availability: Complete

Weakness & likelihood

EPSS (exploitation probability, 30 days): 13.33% (percentile 96.5)
CWE: Not classified

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

Brian Stanback bsguest.cgi 1.0 - Remote Command Execution Exploit · Exploit Database (OffSec) · 2000-12-20