CVE-2003-1538: Improper Input Validation

susehelp in SuSE Linux 8.1, Enterprise Server 8, Office Server, and Openexchange Server 4 does not properly filter shell metacharacters, which allows remote attackers to execute arbitrary commands via CGI queries...

CVE-2007-6459

Anon Proxy Server 0.100, and probably 0.101, allows remote attackers to execute arbitrary commands via shell metacharacters in 1 the host parameter to diagdns.php, and 2 the host parameter and possibly 3 the port parameter to diagconnect.php, a different vulnerability than CVE-2007-6460...

CVE-2007-6176

kbwhois.cgi in K+B-Bestellsystem aka KB-Bestellsystem allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 domain or 2 tld parameter in a checkowner action...

CVE-2007-6182

The responder program in ISPsystem ISPmanager aka ISPmgr 4.2.15.1 allows local users to gain privileges via shell metacharacters in command line arguments...

CVE-2007-6176: Improper Input Validation

kbwhois.cgi in K+B-Bestellsystem aka KB-Bestellsystem allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 domain or 2 tld parameter in a checkowner action...

CVE-2007-6182: Undefined Security Weakness

The responder program in ISPsystem ISPmanager aka ISPmgr 4.2.15.1 allows local users to gain privileges via shell metacharacters in command line arguments...

kbbestell-exec.txt

"KB-Bestellsystem" is a domain order system written in Perl. The "domain" and "tld" parameters in "kbwhois.cgi" are not filtering shell metacharacters. The following examples will show you the /etc/passwd file:...

KB-Bestellsystem (kb_whois.cgi) Command Execution Vulnerability

No description provided by source. "KB-Bestellsystem" is a domain order system written in Perl. The "domain" and "tld" parameters in "kbwhois.cgi" are not filtering shell metacharacters. The following examples will show you the /etc/passwd file:...

KB-Bestellsystem (kb_whois.cgi) Command Execution Vulnerability

Exploit for cgi platform in category web applications =============================================================== KB-Bestellsystem kbwhois.cgi Command Execution Vulnerability =============================================================== "KB-Bestellsystem" is a domain order system written in...

KB-Bestellsystem - kb_whois.cgi Command Execution

KB-Bestellsystem - kbwhois.cgi Command Execution "KB-Bestellsystem" is a domain order system written in Perl. The "domain" and "tld" parameters in "kbwhois.cgi" are not filtering shell metacharacters. The following examples will show you the /etc/passwd file:...

KB-Bestellsystem - 'kb_whois.cgi' Command Execution

"KB-Bestellsystem" is a domain order system written in Perl. The "domain" and "tld" parameters in "kbwhois.cgi" are not filtering shell metacharacters. The following examples will show you the /etc/passwd file:...

Code injection

OpenBase 10.0.5 and earlier allows remote authenticated users to execute arbitrary commands via shell metacharacters in arguments to the 1 AsciiBackup, 2 OEMLicenseInstall, and possibly other stored procedures...

CVE-2007-5926

OpenBase 10.0.5 and earlier allows remote authenticated users to execute arbitrary commands via shell metacharacters in arguments to the 1 AsciiBackup, 2 OEMLicenseInstall, and possibly other stored procedures...

CVE-2007-5926

OpenBase 10.0.5 and earlier allows remote authenticated users to execute arbitrary commands via shell metacharacters in arguments to the 1 AsciiBackup, 2 OEMLicenseInstall, and possibly other stored procedures...

CVE-2007-5926: Improper Input Validation

OpenBase 10.0.5 and earlier allows remote authenticated users to execute arbitrary commands via shell metacharacters in arguments to the 1 AsciiBackup, 2 OEMLicenseInstall, and possibly other stored procedures...

Design/Logic Flaw

GUI.pm in yarssr 0.2.2, when Gnome default URL handling is disabled, allows remote attackers to execute arbitrary commands via shell metacharacters in a link element in a feed...

CVE-2007-5837

GUI.pm in yarssr 0.2.2, when Gnome default URL handling is disabled, allows remote attackers to execute arbitrary commands via shell metacharacters in a link element in a feed...

CVE-2007-5837: Improper Control of Generation of Code

GUI.pm in yarssr 0.2.2, when Gnome default URL handling is disabled, allows remote attackers to execute arbitrary commands via shell metacharacters in a link element in a feed...

CVE-2002-2420

sitesearcher.cgi in Super Site Searcher allows remote attackers to execute arbitrary commands via shell metacharacters in the page parameter...

CVE-2002-2420: Improper Input Validation

sitesearcher.cgi in Super Site Searcher allows remote attackers to execute arbitrary commands via shell metacharacters in the page parameter...