CVE-2002-1854: Rlaj Whois

High severity, CVSS 10.0. EPSS: 4.7% chance of exploitation in the next 30 days.

Rlaj whois CGI script (whois.cgi) 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the domain name field.

Affected products

• Rlaj Rlaj Whois: version 1.0 only

Published 2002-12-31. Last modified 2026-06-16.