Description
Miyabi CGI Tools SEO Links 1.02的index.pl中存在远程代码执行漏洞。远程攻击者可以借助fn命令中的shell元字符执行任意命令。
Miyabi CGI Tools SEO Links 'index.pl'远程代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.exploit-db.com/exploits/34223
https://www.cvedetails.com/product/19700/Miyabi-seo-Cgi-Tools-Seo-Links.html?vendor_id=10988
https://cxsecurity.com/cveproduct/17991/cgi_tools_seo_links/
https://www.threatquarters.com/cves/CVE-2010-2626
https://seclists.org/fulldisclosure/2010/Jun/
https://www.cve.org/Resources/Media/Archives/OldWebsite/data/refs/refmap/source-FULLDISC.html