CVE-2002-0434: Undefined Security Weakness

Marcus S. Xenakis directory.php script allows remote attackers to execute arbitrary commands via shell metacharacters in the dir parameter...

CVE-2002-0436: Undefined Security Weakness

sscdsuncourier.pl CGI script in the Sun Sunsolve CD pack allows remote attackers to execute arbitrary commands via shell metacharacters in the email address parameter...

WebScripts WebBBS 4.x5.0 - Remote Command Execution

WebScripts WebBBS 4.x5.0 - Remote Command Execution source: https://www.securityfocus.com/bid/5048/info WebBBS does not sufficiently filter shell metacharacters from CGI parameters. As a result, remote attackers may execute arbitrary commands on the underlying shell of the system hosting the...

CVE-2002-0220

CVE-2002-0220 affects PhpSmsSend 1.0 through phpsmssend.php. A remote attacker can execute arbitrary commands by sending an SMS containing shell metacharacters, enabling network-accessible command execution with likely partial confidentiality, integrity, and availability impacts as per the NVD me...

CVE-2002-0277

CVE-2002-0277 affects Add2it Mailman Free versions 1.73 and earlier. The vulnerability allows remote attackers to execute arbitrary commands by supplying shell metacharacters in the list parameter. This is evidenced by the NVD entry and associated descriptions. The connected documents confirm the...

CVE-2002-0220

phpsmssend.php in PhpSmsSend 1.0 allows remote attackers to execute arbitrary commands via an SMS message containing shell metacharacters...

CVE-2002-0277

Add2it Mailman Free 1.73 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the list parameter...

CVE-2002-0311

Vulnerability in webtop in UnixWare 7.1.1 and Open UNIX 8.0.0 allows local and possibly remote attackers to gain root privileges via shell metacharacters in the -c argument for 1 in scoadminreg.cgi or 2 serviceaction.cgi...

CVE-2001-1343

wsmail.cgi in WebStore 400/400CS 4.14 allows remote authenticated WebStore administrators to execute arbitrary code via shell metacharacters in the kill parameter...

CVE-2002-0306

CVE-2002-0306 affects Avenger's News System (ANS) up to version 2.11. The flaw allows remote attackers to execute arbitrary commands by supplying shell metacharacters in the p (plugin) parameter of ans.pl. This is a command‑injection vulnerability impacting the plugin parameter, with the NVD indi...

CVE-2002-0220: Undefined Security Weakness

phpsmssend.php in PhpSmsSend 1.0 allows remote attackers to execute arbitrary commands via an SMS message containing shell metacharacters...

CVE-2002-0306: Undefined Security Weakness

ans.pl in Avenger's News System ANS 2.11 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the p plugin parameter...

CVE-2001-1343: Undefined Security Weakness

wsmail.cgi in WebStore 400/400CS 4.14 allows remote authenticated WebStore administrators to execute arbitrary code via shell metacharacters in the kill parameter...

CVE-2002-0277: Undefined Security Weakness

Add2it Mailman Free 1.73 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the list parameter...

CVE-2002-0311: Undefined Security Weakness

Vulnerability in webtop in UnixWare 7.1.1 and Open UNIX 8.0.0 allows local and possibly remote attackers to gain root privileges via shell metacharacters in the -c argument for 1 in scoadminreg.cgi or 2 serviceaction.cgi...

FileSeek CGI Script - Remote Command Execution

FileSeek CGI Script - Remote Command Execution source: https://www.securityfocus.com/bid/6783/info FileSeek is an example cgi-script from "The CGI/Perl Cookbook from John Wiley & Sons". The script is written and maintained by Craig Patchett. It is mainly used to find and download files on a web...

CVE-2002-0061

Apache for Win32 before 1.3.24, and 2.0.x before 2.0.34-beta, allows remote attackers to execute arbitrary commands via shell metacharacters a | pipe character provided as arguments to batch .bat or .cmd scripts, which are sent unfiltered to the shell interpreter, typically cmd.exe...

PT-2002-1151 · Microsoft +1 · Cmd.Exe +2

Name of the Vulnerable Software and Affected Versions: Apache for Win32 versions 1.3.24 and earlier Apache for Win32 versions 2.0.x through 2.0.34-beta Description: The issue allows remote attackers to execute arbitrary commands via shell metacharacters, such as a | pipe character, provided as...

CVE-2001-1206

CVE-2001-1206 affects Matrix CGI vault Last Lines 2.0. The vulnerability: remote attackers can execute arbitrary commands via shell metacharacters in the $error_log variable, enabling remote code execution over the network. The provided sources do not specify affected versions beyond Last Lines 2...

CVE-2001-1214

CVE-2001-1214 : The Unix Manual PHP script (manual.php) from Marcus S. Xenakis Unix Manual 1.0 allows remote code execution by supplying a URL with shell metacharacters. The CERT/CC entry confirms that manual.php does not adequately validate input before passing it to the shell, enabling remote c...