Design/Logic Flaw

The execcommand function in common/helpers.py in Gajim before 0.15 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in an href attribute...

CVE-2012-2085

CVE-2012-2085 affects Gajim prior to 0.15. The vulnerability is in the exec_command function (common/helpers.py) and allows user‑assisted remote attackers to execute arbitrary commands via shell metacharacters in an href attribute. Public references (NVD/OpenVAS/other advisories) confirm the issu...