Design/Logic Flaw

The "runshellscript echo.sh" script in Splunk before 5.0.5 allows remote authenticated users to execute arbitrary commands via a crafted string. NOTE: this issue was SPLIT from CVE-2013-6771 per ADT2 due to different vulnerability types...

Splunk < 5.0.5 Multiple Code Execution Vulnerabilities

According to its version number, the Splunk Web hosted on the remote web server is affected by multiple code execution vulnerabilities : - A directory traversal vulnerability exists in the collect script. A remote attacker can exploit this, using the 'file' parameter, to execute arbitrary command...