CWE-553
Command Shell in Externally Accessible Directory
A possible shell file exists in /cgi-bin/ or other accessible directories. This is extremely dangerous and can be used by an attacker to execute commands on the web server.
Impactr finds and proves whether CWE-553 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.