CVE-2000-1131: Bill Kendrick Gbook.cgi

High severity, CVSS 7.5. EPSS: 3.4% chance of exploitation in the next 30 days.

Bill Kendrick web site guestbook (GBook) allows remote attackers to execute arbitrary commands via shell metacharacters in the _MAILTO form variable.

Affected products

• Bill Kendrick Gbook.cgi: version 1.0 only

Published 2001-01-09. Last modified 2026-06-16.