CVE-1999-1063: Cdomain Cdomainfree

High severity, CVSS 10.0. EPSS: 12.6% chance of exploitation in the next 30 days.

CDomain whois_raw.cgi whois CGI script allows remote attackers to execute arbitrary commands via shell metacharacters in the fqdn parameter.

Affected products

• Cdomain Cdomainfree: version 1.0 only; version 2.0 only; version 2.1 only; version 2.2 only; version 2.3 only; version 2.4 only

Published 1999-06-01. Last modified 2026-06-16.