CVE-2014-7209

run-mailcap in the Debian mime-support package before 3.52-1+deb7u1 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename...

CVE-2014-7209

run-mailcap in the Debian mime-support package before 3.52-1+deb7u1 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename...

Code injection

run-mailcap in the Debian mime-support package before 3.52-1+deb7u1 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename...

CVE-2014-7209

run-mailcap in the Debian mime-support package before 3.52-1+deb7u1 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename...

CVE-2014-7209

run-mailcap in the Debian mime-support package before 3.52-1+deb7u1 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename...

CVE-2014-7209

run-mailcap in the Debian mime-support package before 3.52-1+deb7u1 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename...

CVE-2014-7209: Improper Neutralization of Special Elements used in a Command

run-mailcap in the Debian mime-support package before 3.52-1+deb7u1 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename...

PT-2015-3914

Name of the Vulnerable Software and Affected Versions Debian mime-support package versions prior to 3.52-1+deb7u1 Description The issue allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename. This is related to the run-mailcap in the Debian...

mime-support Package 'run-mailcap' Command Injection Vulnerability

run-mailcap is a tool that executes a program from items in a mailcap file. run-mailcap fails to properly handle shell metacharacters in filenames, allowing an attacker to exploit a vulnerability for command injection attacks that can execute arbitrary shell commands...

UBUNTU-CVE-2014-7209

run-mailcap in the Debian mime-support package before 3.52-1+deb7u1 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename...

CVE-2013-7418

cgi-bin/iptablesgui.cgi in IPCop aka IPCop Firewall before 2.1.5 allows remote authenticated users to execute arbitrary code via shell metacharacters in the TABLE parameter. NOTE: this can be exploited remotely by leveraging a separate cross-site scripting XSS vulnerability...

Cross site scripting

cgi-bin/iptablesgui.cgi in IPCop aka IPCop Firewall before 2.1.5 allows remote authenticated users to execute arbitrary code via shell metacharacters in the TABLE parameter. NOTE: this can be exploited remotely by leveraging a separate cross-site scripting XSS vulnerability...

CVE-2013-7418

cgi-bin/iptablesgui.cgi in IPCop aka IPCop Firewall before 2.1.5 allows remote authenticated users to execute arbitrary code via shell metacharacters in the TABLE parameter. NOTE: this can be exploited remotely by leveraging a separate cross-site scripting XSS vulnerability...

PT-2015-3579

Name of the Vulnerable Software and Affected Versions IPCop aka IPCop Firewall versions prior to 2.1.5 Description The issue allows remote authenticated users to execute arbitrary code via shell metacharacters in the TABLE parameter of the "cgi-bin/iptablesgui.cgi" endpoint. This can be exploited...

CVE-2013-4663

githttpcontroller.rb in the redminegithosting plugin for Redmine allows remote attackers to execute arbitrary commands via shell metacharacters in 1 the service parameter to info/refs, related to the getinforefs function or 2 the reqfile argument to the fileexists function...

CVE-2013-4663: Improper Neutralization of Special Elements used in a Command

githttpcontroller.rb in the redminegithosting plugin for Redmine allows remote attackers to execute arbitrary commands via shell metacharacters in 1 the service parameter to info/refs, related to the getinforefs function or 2 the reqfile argument to the fileexists function...

PT-2014-2849

Name of the Vulnerable Software and Affected Versions Redmine plugin redmine git hosting affected versions not specified Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters. This can be achieved in two ways: 1 by injecting shell metacharacters in t...

CVE-2013-4663

The CVE-2013-4663 entry concerns the redmine_git_hosting plugin for Redmine. The vulnerability is in git_http_controller.rb, where remote attackers can execute arbitrary commands by supplying shell metacharacters in (1) the service parameter to info/refs (get_info_refs function) or (2) the reqfil...

CVE-2013-4663

githttpcontroller.rb in the redminegithosting plugin for Redmine allows remote attackers to execute arbitrary commands via shell metacharacters in 1 the service parameter to info/refs, related to the getinforefs function or 2 the reqfile argument to the fileexists function...

Design/Logic Flaw

index.php in Softaculous Webuzo before 2.1.4 allows remote attackers to execute arbitrary commands via shell metacharacters in a SOFTCookies sid cookie within a login action...