CVE-2002-0532: Undefined Security Weakness

EMU Webmail allows local users to execute arbitrary programs via a .. dot dot in the HTTP Host header that points to a Trojan horse configuration file that contains a pageroot specifier that contains shell metacharacters...

CVE-2002-0061: Improper Neutralization of Special Elements used in an OS Command

Apache for Win32 before 1.3.24, and 2.0.x before 2.0.34-beta, allows remote attackers to execute arbitrary commands via shell metacharacters a | pipe character provided as arguments to batch .bat or .cmd scripts, which are sent unfiltered to the shell interpreter, typically cmd.exe...

CVE-2002-0382: Undefined Security Weakness

XChat IRC client allows remote attackers to execute arbitrary commands via a /dns command on a host whose DNS reverse lookup contains shell metacharacters...

CVE-2002-0437: Undefined Security Weakness

Smsd in SMS Server Tools SMStools before 1.4.8 allows remote attackers to execute arbitrary commands via shell metacharacters backquotes in message text, as described with the term "string format vulnerability" by some sources...

CVE-2002-0488: Undefined Security Weakness

Linux Directory Penguin traceroute.pl CGI script 1.0 allows remote attackers to execute arbitrary code via shell metacharacters in the host parameter...

CVE-2002-0094: Undefined Security Weakness

configconverters.py in BSCW Basic Support for Cooperative Work 3.x and versions before 4.06 allows remote attackers to execute arbitrary commands via shell metacharacters in the file name during filename conversion...

CVE-2002-0904: Undefined Security Weakness

SayText function in Kismet 2.2.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters backtick or pipe in the essid argument...

CVE-2002-1536

Molly IRC bot 0.5 allows remote attackers to execute arbitrary commands via shell metacharacters in 1 the $host variable for nslookup.pl, 2 the $to, $from, or $message variables in pop.pl, 3 the $words or $text variables in sms.pl, or 4 the $server or $printer variables in hpled.pl...

CVE-2002-1461

Web Shop Manager 1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the search box...

CVE-2002-1536

Molly IRC bot 0.5 allows remote attackers to execute arbitrary commands via shell metacharacters in 1 the $host variable for nslookup.pl, 2 the $to, $from, or $message variables in pop.pl, 3 the $words or $text variables in sms.pl, or 4 the $server or $printer variables in hpled.pl...

CVE-2002-1461

Web Shop Manager 1.1 is affected by CVE-2002-1461: remote attackers can execute arbitrary commands by supplying shell metacharacters in the search box. Root cause is improper input handling in the search functionality leading to command execution. CVSS shows AV:N/AC:L/Au:N/C:P/I:P/A:P with a base...

CVE-2002-1461: Undefined Security Weakness

Web Shop Manager 1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the search box...

Psunami Bulletin Board 0.x - Psunami.cgi Remote Command Execution (2)

Psunami Bulletin Board 0.x - Psunami.cgi Remote Command Execution 2 source: https://www.securityfocus.com/bid/6607/info Psunami Bulletin Board is prone to a remote command execution vulnerability. Psunami does not sufficiently sanitize shell metacharacters from query string parameters. As a resul...

Shell metacharacters code execution in dhcpcd

Shell metacharacters are uncommented during external program call...

CVE-2002-2113

search.cgi in AGH HTMLsearch 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the template parameter...

CVE-2002-1843

Perlbot 1.9.2 allows remote attackers to execute arbitrary commands via shell metacharacters in 1 the $text variable in SpelCheck.pm or 2 the $filename variable in HTMLPlog.pm...

CVE-2002-1854

Rlaj whois CGI script whois.cgi 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the domain name field...

CVE-2002-2420

sitesearcher.cgi in Super Site Searcher allows remote attackers to execute arbitrary commands via shell metacharacters in the page parameter...

CVE-2002-1842

Perlbot 1.0 beta allows remote attackers to execute arbitrary commands via shell metacharacters in 1 a word that is being spell checked or 2 an e-mail address...

CVE-2002-1971

The ping utility in networkingutils.php in Sourcecraft NetworkingUtils 1.0 allows remote attackers to read arbitrary files via shell metacharacters in the Domain name or IP address argument...