5632 matches found
CVE-2001-0800: Undefined Security Weakness
lpsched in IRIX 6.5.13f and earlier allows remote attackers to execute arbitrary commands via shell metacharacters...
CVE-2001-0899
Network Tools 0.2 for PHP-Nuke allows remote attackers to execute commands on the server via shell metacharacters in the $hostinput variable...
Shell-метасимволы в Network Tool PHP (shell metacharacters)
Не фильтруются метасимволы при вызове внешней программы...
Bug found at W3Mail Webmail
Name: W3Mail 1.0.2 Personal and Commercial Version Author: Spencer Miles Problem: Script doesnt check for special metacharacters like &;'"|?^$nr. Any webmail user can execute nix commands on webserver. Exploit: On any field at "Compose Message", put something like: Recipient example [email protected]";...
CVE-2001-0439
CVE-2001-0439 affects Licq prior to 1.0.3. The vulnerability stems from how Licq parses received URLs: the URL is passed to the web browser via system() without sufficient input validation, allowing a remote attacker to inject shell metacharacters and execute arbitrary commands. Impact is remote ...
CVE-2001-0439
licq before 1.0.3 allows remote attackers to execute arbitrary commands via shell metacharacters in a URL...
CVE-2001-0439: Undefined Security Weakness
licq before 1.0.3 allows remote attackers to execute arbitrary commands via shell metacharacters in a URL...
CVE-2001-1014
eshop.pl in WebDiscounteshop allows remote attackers to execute arbitrary commands via shell metacharacters in the seite parameter...
CVE-1999-1155
CVE-1999-1155 affects the LakeWeb Mail List CGI script, where remote attackers can execute arbitrary commands by injecting shell metacharacters into the recipient email address. The description specifies a remote command execution risk with network access and no authentication. No explicit patch ...
CVE-1999-1180
O'Reilly WebSite 1.1e and Website Pro 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in an argument to 1 args.cmd or 2 args.bat...
CVE-1999-1153
HAMcards Postcard CGI script 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the recipient email address...
CVE-1999-1479
CVE-1999-1479 affects the CGI textcounter.pl (Matt Wright) – the installed textcounter CGI allows remote command execution via shell metacharacters. Impact is remote code execution with the privileges of the http daemon (usually root or nobody). Remediation available is to remove the CGI from /cg...
CVE-1999-1383
1 bash before 1.14.7, and 2 tcsh 6.05 allow local users to gain privileges via directory names that contain shell metacharacters back-tick, which can cause the commands enclosed in the directory name to be executed when the shell expands filenames using the \w option in the PS1 variable...
CVE-1999-1278
CVE-1999-1278 affects the nlog CGI scripts where the IP address argument is not properly filtered for shell metacharacters. This enables remote attackers to execute commands via two scripts: (1) nlog-smb.pl and (2) rpc-nlog.pl. The description does not provide additional details on affected versi...
CVE-1999-1278
nlog CGI scripts do not properly filter shell metacharacters from the IP address argument, which could allow remote attackers to execute certain commands via 1 nlog-smb.pl or 2 rpc-nlog.pl...
CVE-1999-1220
CVE-1999-1220 affects Majordomo 1.94.3 and earlier. The vulnerability lies in the advertise/noadvertise directives in a configuration file, where shell metacharacters in the Reply-To header can allow a remote attacker to execute arbitrary commands. According to the provided description, exploitat...
CVE-1999-1383
CVE-1999-1383 affects bash (before 1.14.7) and tcsh (6.05). The vulnerability arises when a directory name contains shell metacharacters (back-tick) that are expanded during filename expansion for the PS1 variable, allowing local users to gain privileges. Affects local privilege escalation via di...
CVE-1999-1063
The CVE-1999-1063 entry concerns the CDomain whois_raw.cgi CGI script, where the fqdn parameter accepts shell metacharacters, enabling remote attackers to execute arbitrary commands. This is evidenced by the core description and corroborated by the Nessus NASL entry for CDomainFree’s whois_raw.cg...