Every CVE Search/ Get API key

CVE-2001-0113

statsconfig.pl in OmniHTTPd 2.07 allows remote attackers to execute arbitrary commands via the...

10.0 HighPublic exploit

statsconfig.pl in OmniHTTPd 2.07 allows remote attackers to execute arbitrary commands via the mostbrowsers parameter, whose value is used as part of a generated Perl script.

Exploit likelihood

10.4%Up 9.3 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 10.0

statsconfig.pl in OmniHTTPd 2.07 allows remote attackers to execute arbitrary commands via the mostbrowsers parameter, whose value is used as part of a generated Perl script.

Record
CVE-2001-0113
CVSS 2.0
10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Updated
2026-11-02
CVE List No score

statsconfig.pl in OmniHTTPd 2.07 allows remote attackers to execute arbitrary commands via the mostbrowsers parameter, whose value is used as part of a generated Perl script.

Record
CVE-2001-0113
Updated
2026-11-02
EUVDEUVD-2001-0113 No score

statsconfig.pl in OmniHTTPd 2.07 allows remote attackers to execute arbitrary commands via the mostbrowsers parameter, whose value is used as part of a generated Perl script.

Record
EUVD-2001-0113
Updated
2026-11-03
GitHub AdvisoriesGHSA-vcwg-qg38-hv98 No score

statsconfig.pl in OmniHTTPd 2.07 allows remote attackers to execute arbitrary commands via the...

statsconfig.pl in OmniHTTPd 2.07 allows remote attackers to execute arbitrary commands via the mostbrowsers parameter, whose value is used as part of a generated Perl script.

Record
GHSA-vcwg-qg38-hv98
Updated
2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBOmnicron OmniHTTPd 2.0.7 - File Corruption / Command Execution2001-08-01

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2001-0113 is a high vulnerability (CVSS 10.0) in Omnicron Omnihttpd, published February 14, 2001. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 10.4%, the 95th percentile. No source names a fixed version.

References

MoveEnter Open