CVE:CVE-2013-4407
CNNVD:CNNVD-201311-341
Perl是美国程序员拉里-沃尔（Larry Wall）所研发的一种免费且功能强大的跨平台编程语言。HTTP-Body是其中的一个Body解析模块。
Perl-HTTP-Body模块中的HTTP::Body::Multipart解析器1.08及之前的版本中存在命令注入漏洞。远程攻击者可利用该漏洞上传文件到服务器，执行任意命令。
solution:Upgrade http-body_project http-body to a higher version than 1.17,0.01,0.2,0.03,0.4,0.5,0.6,0.7,0.8,0.9,1.00,1.01,1.02,1.03,1.04,1.05,1.06,1.07,1.08,1.09,1.10,1.11,1.12,1.14,1.15,1.16,and avoid the version (,1.17],0.01,0.2,0.03,0.4,0.5,0.6,0.7,0.8,0.9,1.00,1.01,1.02,1.03,1.04,1.05,1.06,1.07,1.08,1.09,1.10,1.11,1.12,1.14,1.15,1.16