CVE-2000-0287

High

Published: 12/04/2000(UTC)Updated: 16/06/2026(UTC)Translated: 17/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

10.63%

95th percentile - higher than 95% of all known CVEs

The BizDB CGI script, bizdb-search.cgi, allows remote attackers to execute arbitrary commands via shell metacharacters in the dbname parameter.

Attackers may gain full control over the system, leading to serious security breaches and data loss.

It is recommended to filter and validate input data in the dbname parameter and to update the script to the latest version.

Original NVD description (English source)

The BizDB CGI script bizdb-search.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the dbname parameter.