4061 matches found
CVE-2005-1351
CVE-2005-1351 concerns the ad.cgi script, which allows remote attackers to execute arbitrary commands via shell metacharacters in the argument. The NVD entry lists a CVSS v2 base score of 7.5 (HIGH) with network access, low complexity, no authentication, and partial impacts to confidentiality, in...
CVE-2005-1354
The forum.pl script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument...
CVE-2005-1358
CVE-2005-1358 describes a vulnerability in a text.cgi script that allows remote attackers to execute arbitrary commands by injecting shell metacharacters in the argument. The provided documents do not specify the affected product, vendor, version, or root cause beyond the general command injectio...
CVE-2005-1304
CVE-2005-1304 affects the citat.pl script. The exposed vulnerability allows remote attackers to execute arbitrary files by supplying shell metacharacters in the argument. The available documents confirm the issue and its impact (arbitrary command/file execution) but do not provide exploit details...
CVE-2005-1304
The citat.pl script allows remote attackers to execute arbitrary files via shell metacharacters in the argument...
CVE-2005-1296
The CVE-2005-1296 issue involves an include.cgi script that allows remote attackers to execute arbitrary commands via shell metacharacters in the argument. The available data indicate a remote, network-accessible flaw with a CVSSv2 base score of 7.5 (High) and partial impacts to confidentiality, ...
CVE-2005-1296
include.cgi script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument...
CVE-2005-1299
The inserter.cgi script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument...
CVE-2005-1299
The inserter.cgi script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument...
CVE-2005-1296
include.cgi script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument...
CVE-2000-1223
CVE-2000-1223 affects Quikstore Shopping Cart: quikstore.cgi is vulnerable to remote command execution via shell metacharacters in the URL portion of an HTTP GET request. The issue enables arbitrary commands to be executed on the server. Connected sources (Red Hat advisory, CVE records, and NVD) ...
security flaw
xloadimage before 4.1-r2, and xli before 1.17, allows attackers to execute arbitrary commands via shell metacharacters in filenames for compressed images, which are not properly quoted when calling the gunzip command...
DEBIAN-CVE-2004-1175
fish.c in midnight commander allows remote attackers to execute arbitrary programs via "insecure filename quoting," possibly using shell metacharacters...
CVE-2004-1175
fish.c in midnight commander allows remote attackers to execute arbitrary programs via "insecure filename quoting," possibly using shell metacharacters...
CVE-2005-0130
Certain Perl scripts in Konversation 0.15 allow remote attackers to execute arbitrary commands via shell metacharacters in 1 channel names or 2 song names that are not properly quoted when the user runs IRC scripts...
CVE-2004-1175
fish.c in midnight commander allows remote attackers to execute arbitrary programs via "insecure filename quoting," possibly using shell metacharacters...
DEBIAN-CVE-2005-0130
Certain Perl scripts in Konversation 0.15 allow remote attackers to execute arbitrary commands via shell metacharacters in 1 channel names or 2 song names that are not properly quoted when the user runs IRC scripts...
CVE-2004-1175
fish.c in midnight commander allows remote attackers to execute arbitrary programs via "insecure filename quoting," possibly using shell metacharacters...
