CVEvulnerability

CVE-2005-2259

10.0 HIGH Published 2005-07-13 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2005-07-13
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C

Description

The dispallclosed2 function in dispallclosed.pl for multiple USANet Creations products, including (1) USANet Shopping Mall Software, (2) Domain Name Auction Software, (3) Standard Classified Ads Software, and (4) MakeBid Reverse Auction allows remote attackers to execute arbitrary code via shell metacharacters in the DISPCLOSED parameter.

Affected configurations

• usanet creations domain name auction • usanet creations makebid auction deluxe • usanet creations makebid auction deluxe 3.30 • usanet creations makebid auction standard • usanet creations makebid reverse auction • usanet creations standard classified ads • usanet creations usanet shopping mall

References