4095 matches found
CVE-2014-7209
run-mailcap in the Debian mime-support package before 3.52-1+deb7u1 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename...
CVE-2014-7209
run-mailcap in the Debian mime-support package before 3.52-1+deb7u1 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename...
CVE-2014-7209
run-mailcap in the Debian mime-support package before 3.52-1+deb7u1 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename...
UBUNTU-CVE-2014-7209
run-mailcap in the Debian mime-support package before 3.52-1+deb7u1 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename...
mime-support Package 'run-mailcap' Command Injection Vulnerability
run-mailcap is a tool that executes a program from items in a mailcap file. run-mailcap fails to properly handle shell metacharacters in filenames, allowing an attacker to exploit a vulnerability for command injection attacks that can execute arbitrary shell commands...
Cross site scripting
cgi-bin/iptablesgui.cgi in IPCop aka IPCop Firewall before 2.1.5 allows remote authenticated users to execute arbitrary code via shell metacharacters in the TABLE parameter. NOTE: this can be exploited remotely by leveraging a separate cross-site scripting XSS vulnerability...
CVE-2013-7418
cgi-bin/iptablesgui.cgi in IPCop aka IPCop Firewall before 2.1.5 allows remote authenticated users to execute arbitrary code via shell metacharacters in the TABLE parameter. NOTE: this can be exploited remotely by leveraging a separate cross-site scripting XSS vulnerability...
CVE-2013-7418
cgi-bin/iptablesgui.cgi in IPCop aka IPCop Firewall before 2.1.5 allows remote authenticated users to execute arbitrary code via shell metacharacters in the TABLE parameter. NOTE: this can be exploited remotely by leveraging a separate cross-site scripting XSS vulnerability...
CVE-2013-4663
githttpcontroller.rb in the redminegithosting plugin for Redmine allows remote attackers to execute arbitrary commands via shell metacharacters in 1 the service parameter to info/refs, related to the getinforefs function or 2 the reqfile argument to the fileexists function...
CVE-2013-4663
githttpcontroller.rb in the redminegithosting plugin for Redmine allows remote attackers to execute arbitrary commands via shell metacharacters in 1 the service parameter to info/refs, related to the getinforefs function or 2 the reqfile argument to the fileexists function...
CVE-2013-4663
The CVE-2013-4663 entry concerns the redmine_git_hosting plugin for Redmine. The vulnerability is in git_http_controller.rb, where remote attackers can execute arbitrary commands by supplying shell metacharacters in (1) the service parameter to info/refs (get_info_refs function) or (2) the reqfil...
Design/Logic Flaw
index.php in Softaculous Webuzo before 2.1.4 allows remote attackers to execute arbitrary commands via shell metacharacters in a SOFTCookies sid cookie within a login action...
CVE-2013-6041
index.php in Softaculous Webuzo before 2.1.4 allows remote attackers to execute arbitrary commands via shell metacharacters in a SOFTCookies sid cookie within a login action...
AZL-36961 CVE-2004-2771 affecting package mailx for versions less than 12.5-36
The expand function in fio.c in Heirloom mailx 12.5 and earlier and BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in an email address...
AZL-7286 CVE-2004-2771 affecting package mailx for versions less than 12.5-34
The expand function in fio.c in Heirloom mailx 12.5 and earlier and BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in an email address...
UBUNTU-CVE-2004-2771
The expand function in fio.c in Heirloom mailx 12.5 and earlier and BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in an email address...
CVE-2004-2771
The expand function in fio.c in Heirloom mailx 12.5 and earlier and BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in an email address...
DEBIAN-CVE-2004-2771
The expand function in fio.c in Heirloom mailx 12.5 and earlier and BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in an email address...
AZL-6676 CVE-2004-2771 affecting package mailx for versions less than 12.5-34
The expand function in fio.c in Heirloom mailx 12.5 and earlier and BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in an email address...