CVE-2002-2365

Simple WAIS SWAIS 1.11 allows remote attackers to execute arbitrary commands via the shell metacharacters in the search field, as demonstrated using the "|" pipe character...

CVE-2002-2365: Improper Input Validation

Simple WAIS SWAIS 1.11 allows remote attackers to execute arbitrary commands via the shell metacharacters in the search field, as demonstrated using the "|" pipe character...

Hardcoded credentials

hpssd in Hewlett-Packard Linux Imaging and Printing Project hplip 1.x and 2.x before 2.7.10 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a from address, which is not properly handled when invoking sendmail...

CVE-2007-5208

hpssd in Hewlett-Packard Linux Imaging and Printing Project hplip 1.x and 2.x before 2.7.10 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a from address, which is not properly handled when invoking sendmail...

CVE-2007-5208

hpssd in Hewlett-Packard Linux Imaging and Printing Project hplip 1.x and 2.x before 2.7.10 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a from address, which is not properly handled when invoking sendmail...

CVE-2007-5208

CVE-2007-5208 affects the HP Linux Imaging and Printing Project (HPLIP) hpssd daemon. Affected: hplip 1.x and 2.x before 2.7.10. Description from multiple sources indicates that input handling of the From address during sendmail invocation allows context-dependent attackers to execute arbitrary c...

CVE-2007-5208: Improper Input Validation

hpssd in Hewlett-Packard Linux Imaging and Printing Project hplip 1.x and 2.x before 2.7.10 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a from address, which is not properly handled when invoking sendmail...

CVE-2007-5208

hpssd in Hewlett-Packard Linux Imaging and Printing Project hplip 1.x and 2.x before 2.7.10 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a from address, which is not properly handled when invoking sendmail...

hplip arbitrary command execution

hpssd in Hewlett-Packard Linux Imaging and Printing Project hplip 1.x and 2.x before 2.7.10 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a from address, which is not properly handled when invoking sendmail...

CVE-2001-1584

The CVE-2001-1584 entry concerns CardBoard 2.4 greeting card CGI by Michael Barretto. The affected component is the CardBoard 2.4 greeting card CGI, where the recipient field can be exploited via shell metacharacters to execute arbitrary commands remotely. The root cause is improper handling of s...

CVE-2001-1584

CardBoard 2.4 greeting card CGI by Michael Barretto allows remote attackers to execute arbitrary commands via shell metacharacters in the recipient field...

CVE-2001-1584: Improper Input Validation

CardBoard 2.4 greeting card CGI by Michael Barretto allows remote attackers to execute arbitrary commands via shell metacharacters in the recipient field...

Design/Logic Flaw

masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server R7.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the user parameter during a ping action...

CVE-2007-3010

masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server R7.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the user parameter during a ping action...

Code injection

The ewirePCDecrypt function in ewirepcfunctions.php in eWire Payment Client ePC 1.60 and 1.70 allows remote attackers to execute arbitrary commands via shell metacharacters in the paymentinfo parameter to simplePHPLinux/3paymentreceive.php...

CVE-2007-4925

The ewirePCDecrypt function in ewirepcfunctions.php in eWire Payment Client ePC 1.60 and 1.70 allows remote attackers to execute arbitrary commands via shell metacharacters in the paymentinfo parameter to simplePHPLinux/3paymentreceive.php...

CVE-2007-4925

The ewirePCDecrypt function in ewirepcfunctions.php in eWire Payment Client ePC 1.60 and 1.70 allows remote attackers to execute arbitrary commands via shell metacharacters in the paymentinfo parameter to simplePHPLinux/3paymentreceive.php...

CVE-2007-4925

The CVE-2007-4925 vulnerability affects eWire Payment Client (ePC) versions 1.60 and 1.70, where the ewirePC_Decrypt function in ewirepcfunctions.php permits remote command execution through shell metacharacters in the paymentinfo parameter sent to simplePHPLinux/3payment_receive.php. Impact is d...

PT-2007-4307

Name of the Vulnerable Software and Affected Versions Alcatel OmniPCX Enterprise Communication Server versions prior to R7.1 Description The masterCGI component within the Unified Maintenance Tool contains a flaw that allows remote attackers to execute arbitrary commands. This occurs when shell...

CVE-2007-3010

masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server R7.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the user parameter during a ping action. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker...