CVE-2005-1966

The eTracevalidaddr function in eTrace plugin for e107 portal allows remote attackers to execute arbitrary commands via shell metacharacters after a valid argument to the etracehost parameter...

CVE-2005-1960

The getemails function in C.J. Steele Tattle allows remote attackers to execute arbitrary commands via shell metacharacters in certain log entries, as demonstrated using shell metacharacters in an FTP username...

CVE-2005-1795

The vulnerability affects Clam AntiVirus (ClamAV) prior to 0.85 on macOS, where the filecopy function in misc.c can be exploited by a virus name containing shell metacharacters. This occurs when HFS permissions prevent deletion and ditto is invoked, allowing remote code execution. The reported im...

CVE-2005-1795

The filecopy function in misc.c in Clam AntiVirus ClamAV before 0.85, on Mac OS, allows remote attackers to execute arbitrary code via a virus in a filename that contains shell metacharacters, which are not properly handled when HFS permissions prevent the file from being deleted and ditto is...

CVE-2005-1795

The filecopy function in misc.c in Clam AntiVirus ClamAV before 0.85, on Mac OS, allows remote attackers to execute arbitrary code via a virus in a filename that contains shell metacharacters, which are not properly handled when HFS permissions prevent the file from being deleted and ditto is...

Fedora Core 2 : xloadimage-4.1-34.FC2 (2005-236)

This update fixes CVE-2005-0638, a problem in the parsing of shell metacharacters in filenames. It also fixes bugs in handling of malformed TIFF and PBM/PNM/PPM issues. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...

CVE-2005-1628

apage.cgi in WebAPP 0.9.9.2.1, and possibly earlier versions, allows remote attackers to execute arbitrary commands via shell metacharacters in the f parameter...

PT-2005-2605 · Webapp · Webapp

Name of the Vulnerable Software and Affected Versions: WebAPP versions 0.9.9.2.1 and earlier Description: The issue allows remote attackers to execute arbitrary commands via shell metacharacters in the f parameter of the apage.cgi page. Recommendations: For WebAPP versions 0.9.9.2.1 and earlier,...

CVE-2005-1559

The CVE-2005-1559 entry concerns the Web module of Neteyes Nexusway. The vulnerability allows remote command execution via hex-encoded shell metacharacters in the ip parameter of the (1) nslookup.cgi and (2) ping.cgi scripts. Affected software is the Neteyes Nexusway web module; the root cause is...

CVE-2005-1550

CVE-2005-1550 affects Easy Message Board ( Perl-based bulletin board). The OpenVAS details describe an input validation flaw in the remote script, enabling a remote attacker to perform directory traversal or execute arbitrary commands on the host with the web server privileges. The issue is tied ...

CVE-2005-1560

The SSH module in Neteyes Nexusway allows remote attackers to execute arbitrary commands via shell metacharacters in arguments to certain commands, as demonstrated using ping and traceroute...

CVE-2005-1550

easymsgb.pl in Easy Message Board allows remote attackers to execute arbitrary commands via shell metacharacters in the print parameter...

CVE-2005-1559

The web module in Neteyes Nexusway allows remote attackers to execute arbitrary commands via hex-encoded shell metacharacters in the ip parameter for 1 nslookup.cgi or 2 ping.cgi...

CVE-2005-1560

The SSH module in Neteyes Nexusway allows remote attackers to execute arbitrary commands via shell metacharacters in arguments to certain commands, as demonstrated using ping and traceroute...

CVE-2005-1559

The web module in Neteyes Nexusway allows remote attackers to execute arbitrary commands via hex-encoded shell metacharacters in the ip parameter for 1 nslookup.cgi or 2 ping.cgi...

CVE-2004-1782

Athena Web Registration (athenareg.php) is vulnerable to remote command execution via shell metacharacters in the pass parameter. Descriptions from CVE-2004-1782 and OpenVAS/Nessus reports confirm a remote-code-execution flaw in the Athena Web Registration server, allowing arbitrary commands to b...

CVE-2004-1888

display.cgi in Aborior Encore WebForum allows remote to execute arbitrary commands via shell metacharacters in the file variable...

CVE-2004-1782

athenareg.php in Athena Web Registration allows remote attackers to execute arbitrary commands via shell metacharacters in the pass parameter...

CVE-2004-1993

The patch to the checklogin function in omail.pl for omail webmail 0.98.5 is incomplete, which allows remote attackers to execute arbitrary commands via shell metacharacters such as "" backticks in the password...

CVE-2004-1993

The CVE-2004-1993 issue affects omail webmail 0.98.5 and stems from an incomplete patch to the checklogin function in omail.pl, which allows remote attackers to run arbitrary commands via shell metacharacters such as backticks in the password. NVD lists a CVSS2 base score of 10.0 (NETWORK, LOW co...