CVE-2004-1222 weblibs.pl in WebLibs 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the TextFile parameter.

HighCVSS 10.0 EPSS 3.6%

Published: 2004-12-15 07:00
Updated: 2026-06-17 01:07
Exploit status: No public exploit known

Sign in for asset impact Search another CVE

Description

weblibs.pl in WebLibs 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the TextFile parameter.

Affected products

Product	Affected versions	Fixed in
darryl burgdorf weblibs	= 1.0	No fix listed

References

20041207 Remote Web Server Text File Viewing Vulnerability in WebLibs 1.0 mailing-list
11848 exploit vdb-entry vendor-advisory
weblibs-directory-traversal(18399) vdb-entry

CVSS v2.0

10.0 High

AV:N/AC:L/Au:N/C:C/I:C/A:C

Access Vector: Network
Access Complexity: Low
Authentication: None
Confidentiality: Complete
Integrity: Complete
Availability: Complete

Weakness & likelihood

EPSS (exploitation probability, 30 days): 3.55% (percentile 89.5)
CWE: Not classified

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.