Command Injection

libvcs is vulnerable to command injection. An attacker can inject and execute malicious hg clone commands through URLs in the obtain function of hg.py...