CVE-2001-0100 bslist.cgi mailing list script allows remote attackers to execute arbitrary commands via shell metacharacters in the email address.

HighCVSS 10.0 EPSS 15.6%

Published: 2001-05-07 07:00
Updated: 2026-06-17 00:53
Exploit status: No public exploit known

Sign in for asset impact Search another CVE

Description

bslist.cgi mailing list script allows remote attackers to execute arbitrary commands via shell metacharacters in the email address.

Affected products

Product	Affected versions	Fixed in
brian stanback bslist.cgi	All versions	No fix listed

References

20001221 BS Scripts Vulnerabilities exploit mailing-list patch vendor-advisory
www.stanback.net patch
bslist-cgi-execute-commands(5797) vdb-entry

CVSS v2.0

10.0 High

AV:N/AC:L/Au:N/C:C/I:C/A:C

Access Vector: Network
Access Complexity: Low
Authentication: None
Confidentiality: Complete
Integrity: Complete
Availability: Complete

Weakness & likelihood

EPSS (exploitation probability, 30 days): 15.60% (percentile 96.9)
CWE: Not classified

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

Brian Stanback bslist.cgi 1.0 - Remote Command Execution Exploit · Exploit Database (OffSec) · 2000-12-20