First published: Wed Jul 13 2005(Updated: )
The dispallclosed2 function in dispallclosed.pl for multiple USANet Creations products, including (1) USANet Shopping Mall Software, (2) Domain Name Auction Software, (3) Standard Classified Ads Software, and (4) MakeBid Reverse Auction allows remote attackers to execute arbitrary code via shell metacharacters in the DISPCLOSED parameter.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Usanet Creations Makebid Auction Standard | ||
Usanet Creations Makebid Reverse Auction | ||
Usanet Creations Makebid Auction Deluxe | =3.30 | |
Usanet Creations Standard Classified Ads | ||
Usanet Creations Usanet Shopping Mall | ||
Usanet Creations Domain Name Auction | ||
Usanet Creations Makebid Auction Deluxe |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.