CVE-2000-0010

High

Published: 26/12/1999(UTC)Updated: 16/06/2026(UTC)Translated: 17/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

11.07%

95th percentile - higher than 95% of all known CVEs

The whois.cgi program in WebWho+ allows remote attackers to execute commands via shell metacharacters in the TLD parameter.

Exploitation of this vulnerability could lead to remote code execution, posing a serious security threat to the system.

It is recommended to update the WebWho+ software and validate and sanitize input data to prevent the injection of metacharacters.

Original NVD description (English source)

WebWho+ whois.cgi program allows remote attackers to execute commands via shell metacharacters in the TLD parameter.