COMMON WEAKNESS ENUMERATIONIncomplete

CWE-553

Command Shell in Externally Accessible Directory

A possible shell file exists in /cgi-bin/ or other accessible directories. This is extremely dangerous and can be used by an attacker to execute commands on the web server.

Soyutlama

Variant

Yapı

Simple

Sömürü İhtimali

Medium

Problemi anla

Problem nedir?

A possible shell file exists in /cgi-bin/ or other accessible directories. This is extremely dangerous and can be used by an attacker to execute commands on the web server.

Kök neden

Problem nasıl ve ne zaman oluşur?

Yaşam döngüsü evresi

Implementation

Yaşam döngüsü evresi

Operation

Risk

Başarılı sömürü neye yol açar?

Execute Unauthorized Code or Commands

Etkilenen güvenlik alanları: Confidentiality, Integrity, Availability

Savunma

Nasıl önlenir ve çözülür?

Installation · System Configuration

Birden fazla yaşam döngüsü evresinde uygulanacak savunma

Detay
Remove any Shells accessible under the web root folder and children directories.