Lucene search
HistoryAug 23, 2005 - 4:00 a.m.
CVE-2005-2682
cve
2005
2682
aspell_setup.php
dtlink areaedit
spellchecker plugin
remote attackers
arbitrary commands
shell metacharacters
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.1 High
AI Score
Confidence
High
0.007 Low
EPSS
Percentile
80.7%
aspell_setup.php in the SpellChecker plugin in DTLink AreaEdit before 0.4.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the dictionary parameter (aka the lang variable).
Affected configurations
Node
dtlinkareaeditRange≤0.4.2
| CPE | Name | Operator | Version |
|---|---|---|---|
| dtlink:areaedit | dtlink areaedit | le | 0.4.2 |
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.1 High
AI Score
Confidence
High
0.007 Low
EPSS
Percentile
80.7%
Related for CVE-2005-2682