CVE-2003-1128

XMMS.pm in X2 XMMS Remote, as obtained from the vendor server between 4 AM 11 AM PST on May 7, 2003, allows remote attackers to execute arbitrary commands via shell metacharacters in a request to TCP port 8086...

CVE-2004-1770

CVE-2004-1770 affects the login page of cPanel 9.1.0 and possibly earlier . The issue arises from improper handling of the user parameter , allowing remote attackers to execute arbitrary code via shell metacharacters. The vulnerability is described as remote code execution with high impact (netwo...

EUVD-2004-1764

The login page for cPanel 9.1.0, and possibly other versions, allows remote attackers to execute arbitrary code via shell metacharacters in the user parameter...

CVE-2004-1770

The login page for cPanel 9.1.0, and possibly other versions, allows remote attackers to execute arbitrary code via shell metacharacters in the user parameter...

CVE-2005-0689

The Includer project (The Includer, includer.cgi) contains a remote command execution vulnerability (CVE-2005-0689). The flaw allows an attacker to execute arbitrary shell commands by injecting shell metacharacters in the URL or in the template parameter, enabling a remote attacker to run command...

CVE-2005-0689

includer.cgi in The Includer allows remote attackers to execute arbitrary commands via shell metacharacters in 1 the URL or 2 the template parameter...

CVE-2005-0689

includer.cgi in The Includer allows remote attackers to execute arbitrary commands via shell metacharacters in 1 the URL or 2 the template parameter...

CVE-2005-0638

CVE-2005-0638 affects xloadimage (and xli) where filenames are not properly quoted when invoking gunzip, allowing shell metacharacter injection and arbitrary command execution when a malformed filename is processed. The issue impacts xloadimage prior to version 4.1-r2 and xli prior to 1.17, acros...

CVE-2005-0638

xloadimage before 4.1-r2, and xli before 1.17, allows attackers to execute arbitrary commands via shell metacharacters in filenames for compressed images, which are not properly quoted when calling the gunzip command...

CVE-2005-0638

xloadimage before 4.1-r2, and xli before 1.17, allows attackers to execute arbitrary commands via shell metacharacters in filenames for compressed images, which are not properly quoted when calling the gunzip command...

CVE-2005-0638

xloadimage before 4.1-r2, and xli before 1.17, allows attackers to execute arbitrary commands via shell metacharacters in filenames for compressed images, which are not properly quoted when calling the gunzip command...

CVE-2005-0638

xloadimage before 4.1-r2, and xli before 1.17, allows attackers to execute arbitrary commands via shell metacharacters in filenames for compressed images, which are not properly quoted when calling the gunzip command...

DEBIAN-CVE-2005-0638

xloadimage before 4.1-r2, and xli before 1.17, allows attackers to execute arbitrary commands via shell metacharacters in filenames for compressed images, which are not properly quoted when calling the gunzip command...

CVE-2004-1037

The search function in TWiki 20030201 allows remote attackers to execute arbitrary commands via shell metacharacters in a search string...

CVE-2004-1037

The search function in TWiki 20030201 allows remote attackers to execute arbitrary commands via shell metacharacters in a search string...

CVE-2004-1710

The CVE-2004-1710 entry describes a remote command execution vulnerability in page.cgi, exploitable by sending shell metacharacters via the url parameter. The available sources do not specify affected products, versions, root cause specifics beyond the described command-injection vector, or concr...

CVE-2005-0363

awstats.pl in AWStats 4.0 and 6.2 allows remote attackers to execute arbitrary commands via shell metacharacters in the config parameter...

CVE-2005-0362

awstats.pl in AWStats 6.2 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 "pluginmode", 2 "loadplugin", or 3 "noloadplugin" parameters...

CVE-2005-0362

awstats.pl in AWStats 6.2 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 "pluginmode", 2 "loadplugin", or 3 "noloadplugin" parameters...

CVE-2005-0362

CVE-2005-0362 affects AWStats (awstats.pl) with AWStats 6.2, where remote attackers can execute arbitrary commands by injecting shell metacharacters into the parameters 1) pluginmode, 2) loadplugin, or 3) noloadplugin. The issue arises from improper handling/sanitation of user-supplied input in t...