CVE-2000-0287

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

The BizDB CGI script bizdb-search.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the dbname parameter.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Apr 12, 2000
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2000

CVE-2000-02885.0Infonautics getdoc.cgi allows remote attackers to bypass the payment phase for accessing documents via a modified form variable.CVE-2000-02895.0IP masquerading in Linux 2.2.x allows remote attackers to route UDP packets through the internal interface by modifying the external source CVE-2000-02905.0Buffer overflow in Webstar HTTP server allows remote attackers to cause a denial of service via a long GET request.CVE-2000-02914.6Buffer overflow in Star Office 5.1 allows attackers to cause a denial of service by embedding a long URL within a document.CVE-2000-02925.0The Adtran MX2800 M13 Multiplexer allows remote attackers to cause a denial of service via a ping flood to the Ethernet interface, which cauCVE-2000-02932.1aaa_base in SuSE Linux 6.3, and cron.daily in earlier versions, allow local users to delete arbitrary files by creating files whose names inCVE-2000-02947.2Buffer overflow in healthd for FreeBSD allows local users to gain root privileges.CVE-2000-029510.0Buffer overflow in LCDproc allows remote attackers to gain root privileges via the screen_add command.CVE-2000-02967.2fcheck allows local users to gain privileges by embedding shell metacharacters into file names that are processed by fcheck.CVE-2000-02976.4Allaire Forums 2.0.5 allows remote attackers to bypass access restrictions to secure conferences via the rightAccessAllForums or rightModeraCVE-2000-02987.2The unattended installation of Windows 2000 with the OEMPreinstall option sets insecure permissions for the All Users and Default Users direCVE-2000-02995.0Buffer overflow in WebObjects.exe in the WebObjects Developer 4.5 package allows remote attackers to cause a denial of service via an HTTP r
CVE-2000-0287: Critical severity, CVSS 10.0 | Vulnix