CWE-553

Command Shell in Externally Accessible Directory
AI Translation Available

A possible shell file exists in /cgi-bin/ or other accessible directories. This is extremely dangerous and can be used by an attacker to execute commands on the web server.

Status
incomplete
Abstraction
variant
Web Based Web Server

Common Consequences

confidentiality integrity availability
Impacts
execute unauthorized code or commands

Potential Mitigations

Phases:
installation system configuration
Descriptions:
• Remove any Shells accessible under the web root folder and children directories.