## Description

CDomain whois_raw.cgi whois CGI script allows remote attackers to execute arbitrary commands via shell metacharacters in the fqdn parameter.

## Severity

Overall Severity: N/A

### CVSS Metrics

Type | Score | Severity | Vector
--- | --- | --- | ---

## Affected Products

### cdomain - cdomainfree

Affected Versions:

- 1.0

### cdomain - cdomainfree

Affected Versions:

- 2.0

### cdomain - cdomainfree

Affected Versions:

- 2.1

### cdomain - cdomainfree

Affected Versions:

- 2.2

### cdomain - cdomainfree

Affected Versions:

- 2.3

### cdomain - cdomainfree

Affected Versions:

- 2.4

## References

- http://www.securityfocus.com/archive/1/14019
  Exploit Vendor Advisory
- http://www.securityfocus.com/bid/304
- https://exchange.xforce.ibmcloud.com/vulnerabilities/2251
- http://www.securityfocus.com/archive/1/14019
  Exploit Vendor Advisory
- http://www.securityfocus.com/bid/304
- https://exchange.xforce.ibmcloud.com/vulnerabilities/2251

Neural Processor Active