Command Injection

pdfinfo is vulnerable to Command Injection. The vulnerability exists in the command function of info.rb due to missing input sanitization in the pdfpath parameter, which allows an attacker to inject and execute malicious commands...