EUVD-2005-1968

Malware in sbrugna...

CVE-2005-1966

The eTracevalidaddr function in eTrace plugin for e107 portal allows remote attackers to execute arbitrary commands via shell metacharacters after a valid argument to the etracehost parameter...

e107 eTrace Plugin dotrace.php Arbitrary Code Execution

The installation of e107 on the remote host includes the eTrace plugin. This plugin fails to sanitize the 'etracecmd' and 'etracehost' parameters of the 'dotrace.php' script before using them in a system call. An attacker can exploit this flaw to execute arbitrary shell commands subject to the...