CVE-1999-1063

High

Published: 01/06/1999(UTC)Updated: 16/06/2026(UTC)Translated: 17/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

12.56%

96th percentile - higher than 96% of all known CVEs

The whois_raw.cgi CGI script in CDomain allows remote attackers to execute arbitrary commands via shell metacharacters in the fqdn parameter.

Attackers may gain full control over the system, potentially leading to serious security breaches and data loss.

It is recommended to remove or update the whois_raw.cgi script and implement input validation to prevent command injection.

Original NVD description (English source)

CDomain whois_raw.cgi whois CGI script allows remote attackers to execute arbitrary commands via shell metacharacters in the fqdn parameter.