CVE-2003-1248

CVE-2003-1248 describes a command injection vulnerability in H-Sphere WebShell 2.3, allowing remote attackers to execute arbitrary commands. This is achieved by injecting shell metacharacters into the 'mode' and 'zipfile' parameters of a URL request. With a CVSS score of 7.5, this vulnerability is considered high severity due to its network-based attack vector, low attack complexity, and potential for partial compromise of confidentiality, integrity, and availability. Despite its age and severity, there is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.