CVE-2006-6678

The edittextarea function in form-file.c in Netrik 1.15.4 and earlier does not properly verify temporary filenames when editing textarea fields, which allows attackers to execute arbitrary commands via shell metacharacters in the filename...

CVE-2006-6678

The edittextarea function in form-file.c in Netrik 1.15.4 and earlier does not properly verify temporary filenames when editing textarea fields, which allows attackers to execute arbitrary commands via shell metacharacters in the filename...

CVE-2006-6690: Undefined Security Weakness

rtehtmlarea/pi1/class.txrtehtmlareapi1.php in Typo3 4.0.0 through 4.0.3, 3.7 and 3.8 with the rtehtmlarea extension, and 4.1 beta allows remote authenticated users to execute arbitrary commands via shell metacharacters in the userUid parameter to...

CVE-2006-6678: Undefined Security Weakness

The edittextarea function in form-file.c in Netrik 1.15.4 and earlier does not properly verify temporary filenames when editing textarea fields, which allows attackers to execute arbitrary commands via shell metacharacters in the filename...

CVE-2006-6599

maketorrent.php in TorrentFlux 2.2 allows remote authenticated users to execute arbitrary commands via shell metacharacters ";" semicolon in the announce parameter...

CVE-2006-6599

maketorrent.php in TorrentFlux 2.2 allows remote authenticated users to execute arbitrary commands via shell metacharacters ";" semicolon in the announce parameter...

CVE-2006-6599

The CVE-2006-6599 issue affects TorrentFlux 2.2, where maketorrent.php may allow remote authenticated users to execute arbitrary commands via shell metacharacters (";" semicolon) in the announce parameter. This is a command-injection vulnerability through a user-controlled parameter, leading to p...

CVE-2006-6599: Undefined Security Weakness

maketorrent.php in TorrentFlux 2.2 allows remote authenticated users to execute arbitrary commands via shell metacharacters ";" semicolon in the announce parameter...

CVE-2006-5875

eoc.py in Enemies of Carlotta EoC before 1.2.4 allows remote attackers to execute arbitrary commands via shell metacharacters in an "SMTP level e-mail address"...

CVE-2006-5875: Undefined Security Weakness

eoc.py in Enemies of Carlotta EoC before 1.2.4 allows remote attackers to execute arbitrary commands via shell metacharacters in an "SMTP level e-mail address"...

CVE-2006-6454: Undefined Security Weakness

execInBackground.php in J-OWAMP Web Interface 2.1b and earlier allows remote attackers to execute arbitrary commands via shell metacharacters to the 1 exe and 2 args parameters, which are used in an exec function call. NOTE: the provenance of this information is unknown; the details are obtained...

CVE-2006-6330

index.php for TorrentFlux 2.2 allows remote registered users to execute arbitrary commands via shell metacharacters in the kill parameter...

CVE-2006-6331

metaInfo.php in TorrentFlux 2.2, when $cfg"enablefilepriority" is false, allows remote attackers to execute arbitrary commands via shell metacharacters backticks in the torrent parameter to 1 details.php and 2 startpop.php...

CVE-2006-6330

index.php for TorrentFlux 2.2 allows remote registered users to execute arbitrary commands via shell metacharacters in the kill parameter...

CVE-2006-6330

index.php for TorrentFlux 2.2 allows remote registered users to execute arbitrary commands via shell metacharacters in the kill parameter...

CVE-2006-6331

metaInfo.php in TorrentFlux 2.2, when $cfg"enablefilepriority" is false, allows remote attackers to execute arbitrary commands via shell metacharacters backticks in the torrent parameter to 1 details.php and 2 startpop.php...

CVE-2006-6330

index.php for TorrentFlux 2.2 allows remote registered users to execute arbitrary commands via shell metacharacters in the kill parameter...

CVE-2006-6330

CVE-2006-6330 affects TorrentFlux 2.2. The vulnerability is in index.php where the kill parameter accepts shell metacharacters, allowing remote registered users to execute arbitrary commands. Root cause: unsafely handling the kill parameter enables command execution via the shell. Impact is descr...

CVE-2006-6331

CVE-2006-6331 affects TorrentFlux 2.2. When $cfg["enable_file_priority"] is false, remote attackers can execute arbitrary commands via shell metacharacters (backticks) in the torrent parameter to details.php and startpop.php. This is a remote, unauthenticated command-injection affecting the web-f...

CVE-2006-6331: Undefined Security Weakness

metaInfo.php in TorrentFlux 2.2, when $cfg"enablefilepriority" is false, allows remote attackers to execute arbitrary commands via shell metacharacters backticks in the torrent parameter to 1 details.php and 2 startpop.php...