|
Status: Incomplete Weakness ID: 553 (Weakness Variant)Description Summary A possible shell file exists in /cgi-bin/ or other accessible directories. This is extremely dangerous and can be used by an attacker to execute commands on the web server. Potential Mitigations Verify the deployment of the application. Check that no directory listing is exposing the file system. Perform input data validation before doing path resolution. Remove any Shells accessible under the web root folder and children directories. Relationships
Taxonomy Mappings
Time of Introduction Implementation OperationContent History Submissions Anonymous Tool Vendor (under NDA). (Externally Mined) Modifications Eric Dalci. Cigital. 2008-07-01. (External) updated Potential_Mitigations, Time_of_Introduction CWE Content Team. MITRE. 2008-09-08. (Internal) updated Relationships, Taxonomy_Mappings Previous Entry Names Possible Command Shell (csh) (changed 2008-04-11) |
|
|
|||