50 matches found
firefox & mozilla -- command line URL shell command injection
A Secunia Advisory reports: Peter Zelezny has discovered a vulnerability in Firefox, which can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to the shell script used to launch Firefox parsing shell commands that are enclosed within backticks in th...
SquirrelMail WebMail S/MIME Plugin unfiltered shell characters problem
Data from user's certificate is used to invoke external application without filtering...
Multiple AIX bugs
lsmcode, diagexec, invscout, invscoutd invoke external application with relative path, paginit - stack based buffer overflow...
My Firewall Plus privilege escalation
It's possible ot invoke external application with SYSTEM privileges via help subsystem...
Mailtraq privilege escalation
It's possible to execute external application with LocalSystem account...
J2EE code execution
It's possible to execute external application in SQL request to pointbase database...
KDE uncommented shell characters problems
User supplied data is not controlled during the call to external application...
Удаленное выполнение команд через HP Openview / Tivoli NetView (remote execution)
При получении определенного snmp-trap данные передаются внешнему приложению через командную строку, при этом не производится проверка shell-символов...