CWE-553Command Shell in Externally Accessible Directory

Description

A possible shell file exists in /cgi-bin/ or other accessible directories. This is extremely dangerous and can be used by an attacker to execute commands on the web server.

Common consequences

• Confidentiality,Integrity,Availability→Execute Unauthorized Code or Commands

Potential mitigations

• Installation,System Configuration
  Remove any Shells accessible under the web root folder and children directories.

Related CWEs

Recent CVEs classified under this CWE