CVE-2001-0113: Omnicron Omnihttpd

High severity, CVSS 10.0. EPSS: 10.4% chance of exploitation in the next 30 days.

statsconfig.pl in OmniHTTPd 2.07 allows remote attackers to execute arbitrary commands via the mostbrowsers parameter, whose value is used as part of a generated Perl script.

Affected products

• Omnicron Omnihttpd: version 2.0.7 only

Published 2001-03-12. Last modified 2026-06-16.