CWE-553: Command Shell in Externally Accessible Directory
Command Shell in Externally Accessible Directory
Weakness ID: 553 (Weakness Variant)
Status: Incomplete
Description
Description Summary
A possible shell file exists in /cgi-bin/ or other accessible
directories. This is extremely dangerous and can be used by an attacker to
execute commands on the web server.
Time of Introduction
Implementation
Operation
Potential Mitigations
Phase
Description
Verify the deployment of the application. Check that no directory
listing is exposing the file system.
Perform input data validation before doing path resolution.
Remove any Shells accessible under the web root folder and children
directories.
Description
