5658 matches found
CVE-2000-0296
The CVE-2000-0296 entry documents a local privilege-escalation flaw in fcheck, where embedding shell metacharacters in file names processed by fcheck can allow a local user to gain higher privileges. The description and connected records confirm the affected component is fcheck, with the underlyi...
CVE-2000-0952
CVE-2000-0952 affects the Global CGI program, specifically global.cgi, in Global 3.55 and earlier on NetBSD. The vulnerability allows remote attackers to execute arbitrary commands via shell metacharacters in input handled by the CGI. Root cause: improper handling of shell input leading to comman...
CVE-2000-1131
CVE-2000-1131 concerns Bill Kendrick’s web site guestbook (GBook), where remote Command Execution is possible via shell metacharacters in the _MAILTO form variable. The vulnerability stems from improper handling of user-supplied input, enabling arbitrary commands to be run on the server. Reported...
CVE-2000-0878
The mailto CGI script allows remote attacker to execute arbitrary commands via shell metacharacters in the emailadd form field...
CVE-2000-1068
The CVE-2000-1068 entry concerns Poll It 2.0: the pollit.cgi component is vulnerable to remote command execution via shell metacharacters supplied in the poll_options parameter. The underlying issue is improper handling of user-supplied input in that parameter, enabling an attacker to execute arb...
CVE-2000-0287
The BizDB CGI script bizdb-search.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the dbname parameter...
CVE-2000-0296
fcheck allows local users to gain privileges by embedding shell metacharacters into file names that are processed by fcheck...
CVE-2000-1131
Bill Kendrick web site guestbook GBook allows remote attackers to execute arbitrary commands via shell metacharacters in the MAILTO form variable...
CVE-2000-0910
Affected software: Horde library 1.02. Vulnerability: arbitrary commands can be executed via shell metacharacters in the from address. Root cause: lack of proper sanitization of shell metacharacters in the From field. Impact: potential remote code execution as implied by command execution in the ...
CVE-2000-0910
Horde library 1.02 allows attackers to execute arbitrary commands via shell metacharacters in the "from" address...
CVE-2000-0923
CVE-2000-0923 concerns the authenticate.cgi CGI in Aplio PRO, where remote attackers can execute arbitrary commands by injecting shell metacharacters into the password parameter. The entry lists a CVSS v2 base score of 7.5 (HIGH) with network access, low attack complexity, and no authentication. ...
CVE-2000-0252
The CVE-2000-0252 entry concerns the Dansie Shopping Cart (cart.pl/cart.cgi). An input in a form variable allows remote command execution through shell metacharacters, due to insufficient input sanitization. This yields the potential for arbitrary commands to be run on affected systems. Public re...
CVE-2000-0878: Undefined Security Weakness
The mailto CGI script allows remote attacker to execute arbitrary commands via shell metacharacters in the emailadd form field...
CVE-2000-0296: Undefined Security Weakness
fcheck allows local users to gain privileges by embedding shell metacharacters into file names that are processed by fcheck...
CVE-2000-1068: Undefined Security Weakness
pollit.cgi in Poll It 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the polloptions parameter...
CVE-2000-1131: Undefined Security Weakness
Bill Kendrick web site guestbook GBook allows remote attackers to execute arbitrary commands via shell metacharacters in the MAILTO form variable...
CVE-2000-0861: Undefined Security Weakness
Mailman 1.1 allows list administrators to execute arbitrary commands via shell metacharacters in the %listname macro expansion...
CVE-2000-0252: Undefined Security Weakness
The dansie shopping cart application cart.pl allows remote attackers to execute commands via a shell metacharacters in a form variable...
CVE-2000-0287: Undefined Security Weakness
The BizDB CGI script bizdb-search.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the dbname parameter...
