4086 matches found
CVE-2005-2682
CVE-2005-2682 affects the DTLink AreaEdit SpellChecker plugin before version 0.4.3. The vulnerability arises in aspell_setup.php where remote attackers can execute arbitrary commands by supplying shell metacharacters in the dictionary parameter (aka the lang variable). This constitutes remote cod...
CVE-2005-2684
nquser.php in Virtual Edge Netquery 3.11 allows remote attackers to execute arbitrary commands via shell metacharacters in the host parameter to a dig query...
CVE-2005-2684
nquser.php in Virtual Edge Netquery 3.11 allows remote attackers to execute arbitrary commands via shell metacharacters in the host parameter to a dig query...
CVE-2004-2347
The CVE-2004-2347 entry applies to Leif M. Wright Web Blog (blog.cgi) versions 1.1 and 1.1.5. The vulnerability arises in the ViewFile request’s file parameter, where shell metacharacters (e.g., |) enable remote command execution. Impact is remote arbitrary commands executed with the web server u...
CVE-2005-2547
security.c in hcid for BlueZ 2.16, 2.17, and 2.18 allows remote attackers to execute arbitrary commands via shell metacharacters in the Bluetooth device name when invoking the PIN helper...
CVE-2005-2547
CVE-2005-2547 affects BlueZ bluez-utils/hcid components. The advisory describes missing input sanitisation in security.c in hcid, enabling remote attackers to execute arbitrary commands by supplying shell metacharacters in the Bluetooth device name during PIN helper invocation. Affected products/...
CVE-2005-2420
flsearch.pl in FtpLocate 2.02 allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTP GET request...
USN-158-1: gzip utility vulnerability
zgrep did not handle shell metacharacters like '|' and '&' properly when they occurred in input file names. This could be exploited to execute arbitrary commands with user privileges if zgrep is run in an untrusted directory with specially crafted file names...
DEBIAN-CVE-2005-2368
vim 6.3 before 6.3.082, with modelines enabled, allows external user-assisted attackers to execute arbitrary commands via shell metacharacters in the 1 glob or 2 expand commands of a foldexpr expression for calculating fold levels...
CVE-2005-2368
vim 6.3 before 6.3.082, with modelines enabled, allows external user-assisted attackers to execute arbitrary commands via shell metacharacters in the 1 glob or 2 expand commands of a foldexpr expression for calculating fold levels...
CVE-2005-2368
vim 6.3 before 6.3.082, with modelines enabled, allows external user-assisted attackers to execute arbitrary commands via shell metacharacters in the 1 glob or 2 expand commands of a foldexpr expression for calculating fold levels...
CVE-2005-2368
vim 6.3 before 6.3.082, with modelines enabled, allows external user-assisted attackers to execute arbitrary commands via shell metacharacters in the 1 glob or 2 expand commands of a foldexpr expression for calculating fold levels...
CVE-2005-2334
The CVE-2005-2334 entry describes a remote command execution vulnerability in Y.SAK where shell metacharacters in the $no variable allow an attacker to run arbitrary commands via three CGI scripts: w_s3mbfm.cgi, w_s3adix.cgi, or w_s3sbfm.cgi. The available sources confirm the vulnerable component...
CVE-2005-2334
Y.SAK allows remote attackers to execute arbitrary commands via shell metacharacters in the $no variable to 1 ws3mbfm.cgi, 2 ws3adix.cgi, or 3 ws3sbfm.cgi...
CVE-2005-2334
Y.SAK allows remote attackers to execute arbitrary commands via shell metacharacters in the $no variable to 1 ws3mbfm.cgi, 2 ws3adix.cgi, or 3 ws3sbfm.cgi...
CVE-2004-2275
The CVE-2004-2275 entry concerns i-mall.cgi in I-Mall Commerce, where remote command execution is possible via shell metacharacters in the p parameter. The vulnerability stems from insufficient input sanitization in i-mall.cgi, enabling an attacker to pass arbitrary shell commands to the remote s...
CVE-2004-2284
The readlistfromfile function in vacation.pl for OpenWebmail before 2.32 20040629 allows remote attackers to execute arbitrary commands via shell metacharacters in a filename argument...
CVE-2004-2275
i-mall.cgi in I-Mall Commerce allows remote attackers to execute arbitrary commands via shell metacharacters via the p parameter...
CVE-2004-2284
CVE-2004-2284 affects OpenWebmail prior to 2.32 (vacation.pl). The read_list_from_file function in vacation.pl allows remote attackers to execute arbitrary commands via shell metacharacters in a filename argument, enabling remote code execution with the web server’s privileges. OpenVAS and Nessus...