CVE-2006-2615

The CVE-2006-2615 entry concerns ping.php in Russcom.Ping, where the domain parameter is vulnerable to shell metacharacter input leading to remote command execution. The NVD entry indicates network-based, low-complexity exploitation with no authentication required and potential partial impacts to...

CVE-2006-2615: Undefined Security Weakness

ping.php in Russcom.Ping allows remote attackers to execute arbitrary commands via shell metacharacters in the domain parameter...

Code injection

Prodder before 0.5, and perlpodder before 0.5, allows remote attackers to execute arbitrary code via shell metacharacters in the URL of a podcast url attribute of an enclosure tag, or $encurl variable, which is executed when running wget...

CVE-2006-2550: Undefined Security Weakness

perlpodder before 0.5 allows remote attackers to execute arbitrary code via shell metacharacters in the URL of a podcast, which are executed when saving the URL to a log file. NOTE: the wget vector is already covered by CVE-2006-2548...

CVE-2006-2548: Improper Control of Generation of Code

Prodder before 0.5, and perlpodder before 0.5, allows remote attackers to execute arbitrary code via shell metacharacters in the URL of a podcast url attribute of an enclosure tag, or $encurl variable, which is executed when running wget...

CVE-2005-1752

CVE-2005-1752 affects the Gforge SCM component, specifically viewFile.php, where the file_name parameter can be manipulated to execute arbitrary shell commands. The issue exists in Gforge before version 4.0, enabling remote attackers to run commands with the shell via crafted input. The provided ...

CVE-2005-1752: Undefined Security Weakness

viewFile.php in the scm component of Gforge before 4.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename parameter...

CVE-2006-2237

The web interface for AWStats 6.4 and 6.5, when statistics updates are enabled, allows remote attackers to execute arbitrary code via shell metacharacters in the migrate parameter...

CVE-2006-2237

The web interface for AWStats 6.4 and 6.5, when statistics updates are enabled, allows remote attackers to execute arbitrary code via shell metacharacters in the migrate parameter...

Code injection

The web interface for AWStats 6.4 and 6.5, when statistics updates are enabled, allows remote attackers to execute arbitrary code via shell metacharacters in the migrate parameter...

CVE-2006-2237

The web interface for AWStats 6.4 and 6.5, when statistics updates are enabled, allows remote attackers to execute arbitrary code via shell metacharacters in the migrate parameter...

CVE-2006-2237: Undefined Security Weakness

The web interface for AWStats 6.4 and 6.5, when statistics updates are enabled, allows remote attackers to execute arbitrary code via shell metacharacters in the migrate parameter...

Design/Logic Flaw

nettools.php in PHP Net Tools 2.7.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the host parameter...

EUVD-2006-1921

nettools.php in PHP Net Tools 2.7.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the host parameter...

CVE-2006-1921: Undefined Security Weakness

nettools.php in PHP Net Tools 2.7.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the host parameter...

CVE-2006-1799

censtore.cgi in Censtore 7.3.002 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the page parameter...

Code injection

censtore.cgi in Censtore 7.3.002 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the page parameter...

CVE-2006-1799

CVE-2006-1799 affects Censtore 7.3.002 and earlier; the vulnerability is a remote command-injection flaw in censtore.cgi where shell metacharacters in the page parameter can be exploited to run arbitrary commands. Root cause is improper sanitization/handling of the page parameter, enabling an att...

CVE-2006-1799: Undefined Security Weakness

censtore.cgi in Censtore 7.3.002 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the page parameter...

TWiki revision control shell command injection

Added: 04/06/2006 CVE: CVE-2005-2877 BID: 14834 OSVDB: 19403 Background TWiki is a web-based collaboration platform written in PERL. Problem The revision control function in TWiki does not sufficiently check the rev parameter before using it in a shell command call. This allows remote attackers t...