https://www.exploit-db.com/exploits/23513
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200412-543

AthenaWebRegistration是一款AthenaWeb注册脚本程序。AthenaWebRegistration对用户提交输入缺少充分检查，远程攻击者可以利用这个漏洞以WEB进程权限在系统上执行任意命令。问题是athenareg.php脚本对用户提交给’pass’参数的数据缺少充分检查，提交类似”;command”的字符串，可导致以WEB进程权限执行任意命令。

source: http://www.securityfocus.com/bid/9349/info

A problem has been reported in the handling of user-supplied input by the Athena Web Registration scripts. Because of this, it may be possible for an attacker to gain unauthorized access to a vulnerable system. 

http://www.example.com/athenareg.php?pass=%20;whoami

来源:BID
名称:9349
链接:http://www.securityfocus.com/bid/9349
来源:OSVDB
名称:16861
链接:http://www.osvdb.org/16861
来源：NSFOCUS
名称：5882
链接：http://www.nsfocus.net/vulndb/5882