CWE-553

Command Shell in Externally Accessible Directory

Weakness Description

A possible shell file exists in /cgi-bin/ or other accessible directories. This is extremely dangerous and can be used by an attacker to execute commands on the web server.

Potential Mitigations

InstallationSystem Configuration

Remove any Shells accessible under the web root folder and children directories.

Common Consequences

ConfidentialityIntegrityAvailability
Execute Unauthorized Code or Commands
Advertisement

Related Weaknesses