EDB-20557

functional

Omnicron OmniHTTPd 2.0.7 - File Corruption / Command Execution

view exploit source exploit_dbverifiedtype remoteauthor Joe Testapublished 2001-08-01catalog exploit_db

exploited CVEs (2)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2001-0113US	high10.0	10.4% (96th)	Exploit	2001-03-12
statsconfig.pl in OmniHTTPd 2.07 allows remote attackers to execute arbitrary commands via the mostbrowsers parameter, whose value is used as part of a generated Perl script.
CVE-2001-0114US	medium5.0	2.21% (83rd)	Exploit	2001-03-12
statsconfig.pl in OmniHTTPd 2.07 allows remote attackers to overwrite arbitrary files via the cgidir parameter.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.