National Vulnerability Database (CVE-2001-1495)

National Cyber-Alert System Vulnerability Summary: CVE-2001-1495
Orirignal release date: 2001-12-31 Source: US-CERT/NIST ### Overview network_query.php in Network Query Tool 1.0 allows remote attackers execute arbitrary commands via shell metacharacters in the target parameter. ### Impact CVSS Severity: 7 (High) Range: remote Authentication: input Impact Type: sec_prot user="1" ### Reference to Advisories, Solutions, and Tools External Source: BID Name: 3455 Hyperlink: http://www.securityfocus.com/bid/3455 External Source: XF Name: nqt-php-command-execution(7322) Hyperlink: http://xforce.iss.net/xforce/xfdb/7322 External Source: BUGTRAQ Name: 20011022 [Advisory iSecureLabs] Network Query Tool remote command execution Hyperlink: http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2001-10/0179.html ### Vulnerable Software and Vendor Network Query Tool adapted for PHPNuke (shaun@shat.net) Network Query Tool (shaun@shat.net) Technical Details CVE Standard Vulnerability Entry: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-1495