CVE-2005-2334 Y.SAK allows remote attackers to execute arbitrary commands via shell metacharacters in the $no variable to (1) w_s3mbfm.cgi, (2) w_s3adix.cgi, or (3) w_s3sbfm.cgi.
HighCVSS 10.0
EPSS 2.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Y.SAK allows remote attackers to execute arbitrary commands via shell metacharacters in the $no variable to (1) w_s3mbfm.cgi, (2) w_s3adix.cgi, or (3) w_s3sbfm.cgi.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| y.sak | All versions | No fix listed |