CVE-2004-2776: Goscript Project Goscript

Critical severity, CVSS 9.8. EPSS: 3.6% chance of exploitation in the next 30 days.

go.cgi in GoScript 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) query string or (2) artarchive parameter.

Affected products

• Goscript Project Goscript: version 2.0 only

Published 2019-12-31. Last modified 2026-06-16.