The installation of AdCycle banner management system leaves the build.cgi program in a web-accessible directory, which allows remote attackers to execute the program and view passwords or delete databases.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Adcycle | Adcycle | 0.77b (including) | 0.77b (including) |