CVE:CVE-1999-1180
CNNVD:CNNVD-199902-030
O'Reilly WebSite 1.1e以及 Website Pro 2.0版本存在漏洞。远程攻击者通过(1)args.cmd 或(2)args.bat参数中的shell元字符执行任意命令。
solution:Upgrade oreilly website to a higher version than 1.1e,and avoid the version 1.1e; Upgrade oreilly website_pro to a higher version than 2.4,2.0,2.1,and avoid the version (,2.4],2.0,2.1