> CVE-1999-1053 [HIGH]

« BACK_TO_HOME
PUBLISHED
1999-09-13 04:00
MODIFIED
2025-04-03 01:03
EPSS (Prob. Exploit)
85.21%
Top 0.3%
⚡ EPSS ÉLEVÉ (85.2%)
DATA SOURCES:
NVD 🔗 2025-10-18 CVE PROJECT 🔗 2026-10-20 FIRST EPSS 🔗 2026-10-18

> DESCRIPTION

guestbook.pl cleanses user-inserted SSI commands by removing text between "<!--" and "-->" separators, which allows remote attackers to execute arbitrary commands when guestbook.pl is run on Apache 1.3.9 and possibly other versions, since Apache allows other closing sequences besides "-->".

> AFFECTED_PRODUCTS

Apache - HTTP Server
Version: 1.3.9
Matt Wright - Matt Wright Guestbook
Version: 2.3

> HISTORIQUE DES MODIFICATIONS

Première apparition
13/09/1999 04:00
Source: NVD
📊 ENRICHISSEMENT 18/10/2025 13:59
CVEPROJECT
Champ modifié: CVE Project
Ancienne valeur:
Non
Nouvelle valeur:
Oui
Total des modifications: 1 Dernière mise à jour: 1 year ago
« BACK_TO_HOME