CVE-2009-1361 - dig.php in GScripts.net DNS Tools allows remote attackers to execute arbitrary commands via shell metacharacters in the host parameter

Back Back to CVE browser

HIGH

dig.php in GScripts.net DNS Tools allows remote attackers to execute arbitrary commands via shell metacharacters in the host parameter

Published Apr 22, 2009

10.0

HIGH

CVSS 2.0

EPSS 3.91%

Description

dig.php in GScripts.net DNS Tools allows remote attackers to execute arbitrary commands via shell metacharacters in the host parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-20

Improper Input Validation

References (1)

http://secunia.com/advisories/34773
third-party-advisoryx_refsource_SECUNIAVendor Advisory

Link	Providers	Tags
http://secunia.com/advisories/34773		third-party-advisoryx_refsource_SECUNIAVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Apr 22, 2009

Updated Sep 16, 2024

Reserved Apr 22, 2009

Link CVE-2009-1361

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2009-1361

Red Hat

Severity n/a

Public date n/a

Links CVE-2009-1361