PT-2006-1826 · Teca Scripts · Teca Scripts Guestex
CVSS v2.0
7.5
High
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Teca Scripts Guestex version 1.0
Description
The issue allows remote attackers to execute arbitrary shell commands, possibly involving shell metacharacters, via the
email parameter in the guestex.pl script.Recommendations
For version 1.0, avoid using the
email parameter in the guestex.pl script until a fix is available. As a temporary workaround, consider restricting access to the guestex.pl script to minimize the risk of exploitation.Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Teca Scripts Guestex