CCBILL CGI Remote Exploit for /ccbill/whereami.cgi

vendor:

by:

Knight420

7.5

CVSS

HIGH

Remote Code Execution

CWE

Product Name:

Affected Version From:

Affected Version To:

Patch Exists: NO

Related CWE:

CPE:

Metasploit:

Other Scripts:

Platforms Tested:

2003

Spawns a shell with netcat and attempts to connect into the server on port 6666 to gain access of the webserver uid.

Patch the vulnerable code in /ccbill/whereami.cgi.

Source