Lucene search

K
osvGoogleOSV:DSA-650-1
HistoryJan 20, 2005 - 12:00 a.m.

sword - missing input sanitising

2005-01-2000:00:00
Google
osv.dev
6

EPSS

0.011

Percentile

84.6%

Ulf Härnhammar discovered that due to missing input sanitising in
diatheke, a CGI script for making and browsing a bible website, it is
possible to execute arbitrary commands via a specially crafted URL.

For the stable distribution (woody) this problem has been fixed in
version 1.5.3-3woody2.

For the unstable distribution (sid) this problem will be fixed soon.

We recommend that you upgrade your diatheke package.