Code injection

statuswml.cgi in Nagios before 3.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 ping or 2 Traceroute parameters...

Immunity Canvas: NAGIOS_PING

Name| nagiosping ---|--- CVE| CVE-2009-2288 Exploit Pack| CANVAS Description| nagiosping Notes| CVE Name: CVE-2009-2288 VENDOR: http://www.nagios.org/ CVEUrl: https://vulners.com/cve/CVE-2009-2288 Notes: statuswml.cgi in Nagios before 3.1.1 allows remote attackers to execute arbitrary commands vi...

CVE-2009-2288

The statuswml.cgi script in Nagios versions prior to 3.1.1 is vulnerable to remote command execution due to insufficient input validation. Attackers can inject shell metacharacters into the ping or traceroute parameters to execute arbitrary commands on the host system. Successful exploitation may...

CVE-2009-2288

statuswml.cgi in Nagios before 3.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 ping or 2 Traceroute parameters...

StoneTrip Ston3D Products Code Execution Vulnerability

This host is installed with StoneTrip Ston3D products and is prone to Code Execution vulnerability. OpenVAS Vulnerability Test $Id: gbston3dprdtscodeexecvulnwin.nasl 6517 2017-07-04 13:34:20Z cfischer $ StoneTrip Ston3D Products Code Execution Vulnerability Authors: Nikita MR Copyright: Copyright...

StoneTrip Ston3D Standalone Player Code Execution Vulnerability (Linux)

This host is installed with StoneTrip Ston3D Standalone Player and is prone to Code Execution vulnerability. OpenVAS Vulnerability Test $Id: gbston3dprdtscodeexecvulnlin.nasl 4869 2016-12-29 11:01:45Z teissa $ StoneTrip Ston3D Standalone Player Code Execution Vulnerability Linux Authors: Nikita M...

StoneTrip Ston3D Standalone Player Code Execution Vulnerability - Linux

StoneTrip Ston3D Standalone Player is prone to a code execution vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-6826

dhtml.pl in MHF Media Pro allows remote attackers to execute arbitrary commands via shell metacharacters in the page parameter, as demonstrated using the 1 adverttop.htm or 2 advertlogin.htm pages...

Code injection

dhtml.pl in MHF Media Pro allows remote attackers to execute arbitrary commands via shell metacharacters in the page parameter, as demonstrated using the 1 adverttop.htm or 2 advertlogin.htm pages...

CVE-2008-6826

CVE-2008-6826 affects MHF Media Pro’s dhtml.pl. The vulnerability enables remote command execution via shell metacharacters in the page parameter, demonstrated on the advert_top.htm and advert_login.htm pages. The CVSSv2 base score is 10.0 (HIGH) with network access, low attack complexity, no aut...

CVE-2008-6826: Improper Input Validation

dhtml.pl in MHF Media Pro allows remote attackers to execute arbitrary commands via shell metacharacters in the page parameter, as demonstrated using the 1 adverttop.htm or 2 advertlogin.htm pages...

Ubuntu: Security Advisory (USN-723-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Code injection

dig.php in GScripts.net DNS Tools allows remote attackers to execute arbitrary commands via shell metacharacters in the ns parameter...

CVE-2009-1916

dig.php in GScripts.net DNS Tools allows remote attackers to execute arbitrary commands via shell metacharacters in the ns parameter...

CVE-2009-1916

dig.php in GScripts.net DNS Tools allows remote attackers to execute arbitrary commands via shell metacharacters in the ns parameter...

Design/Logic Flaw

The system.openURL function in StoneTrip Ston3D StandalonePlayer aka S3DPlayer StandAlone 1.6.2.4 and 1.7.0.1 and WebPlayer aka S3DPlayer Web 1.6.0.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the first argument the sURL argument...

CVE-2009-1792

The system.openURL function in StoneTrip Ston3D StandalonePlayer aka S3DPlayer StandAlone 1.6.2.4 and 1.7.0.1 and WebPlayer aka S3DPlayer Web 1.6.0.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the first argument the sURL argument...

CVE-2009-1792

StoneTrip Ston3D products and players are vulnerable to a remote code/injection flaw in system.openURL, allowing arbitrary command execution via crafted sURL. Affected: S3DPlayer StandAlone v1.6.2.4, v1.7.0.1 and S3DPlayer Web v1.6.0.0. Root cause: the scripting function system.openURL does not p...

CVE-2009-1792

The system.openURL function in StoneTrip Ston3D StandalonePlayer aka S3DPlayer StandAlone 1.6.2.4 and 1.7.0.1 and WebPlayer aka S3DPlayer Web 1.6.0.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the first argument the sURL argument...

SquirrelMail Command Execution Vulnerability

SquirrelMail Web application is prone to a command execution vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...