Lucene search
K

9 matches found

seebug.org
seebug.org
added 2014/07/01 12:0 a.m.15 views

Prodder 0.4 Arbitrary Shell Command Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/18068/info Prodder is prone to an arbitrary command-execution vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to execute...

7.1AI score
Exploits0
Packet Storm
Packet Storm
added 2006/05/24 12:0 a.m.32 views

rt-sa-2006-002.txt

Advisory: Prodder Remote Arbitrary Command Execution RedTeam identified a security flaw in prodder which makes it possible for a malicious podcast server to execute arbitrary shell commands on the victim's client. Details ======= Product: Prodder Affected Versions: All versions up to prodder-0.4...

7.4AI score
Exploits0
NVD
NVD
added 2006/05/23 10:6 a.m.9 views

CVE-2006-2548

Prodder before 0.5, and perlpodder before 0.5, allows remote attackers to execute arbitrary code via shell metacharacters in the URL of a podcast url attribute of an enclosure tag, or $encurl variable, which is executed when running wget...

7.5CVSS7.5AI score0.34147EPSS
Exploits1References13
Prion
Prion
added 2006/05/23 10:6 a.m.13 views

Code injection

Prodder before 0.5, and perlpodder before 0.5, allows remote attackers to execute arbitrary code via shell metacharacters in the URL of a podcast url attribute of an enclosure tag, or $encurl variable, which is executed when running wget...

7.5CVSS7.9AI score0.34147EPSS
Exploits1References13Affected Software2
Cvelist
Cvelist
added 2006/05/23 10:0 a.m.16 views

CVE-2006-2548

Prodder before 0.5, and perlpodder before 0.5, allows remote attackers to execute arbitrary code via shell metacharacters in the URL of a podcast url attribute of an enclosure tag, or $encurl variable, which is executed when running wget...

7.5AI score0.34147EPSS
Exploits1References13
CVE
CVE
added 2006/05/23 10:0 a.m.46 views

CVE-2006-2548

CVE-2006-2548 concerns Prodder before 0.5 and perlpodder before 0.5. The vulnerability arises from shell metacharacters in the podcast URL (url attribute of an enclosure tag, or $enc_url) that are executed when wget runs, allowing remote code execution. Exploitation details in the connected docum...

7.5CVSS7.6AI score0.34147EPSS
Exploits1References13Affected Software2
securityvulns
securityvulns
added 2006/05/23 12:0 a.m.42 views

Prodder Remote Arbitrary Command Execution

Advisory: Prodder Remote Arbitrary Command Execution RedTeam identified a security flaw in prodder which makes it possible for a malicious podcast server to execute arbitrary shell commands on the victim's client. Details ======= Product: Prodder Affected Versions: All versions up to prodder-0.4...

1AI score
Exploits0
exploitpack
exploitpack
added 2006/05/22 12:0 a.m.11 views

Prodder 0.4 - Arbitrary Shell Command Execution

Prodder 0.4 - Arbitrary Shell Command Execution source: https://www.securityfocus.com/bid/18068/info Prodder is prone to an arbitrary command-execution vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to...

0.7AI score
Exploits0
Exploit DB
Exploit DB
added 2006/05/22 12:0 a.m.21 views

Prodder 0.4 - Arbitrary Shell Command Execution

source: https://www.securityfocus.com/bid/18068/info Prodder is prone to an arbitrary command-execution vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to execute arbitrary shell commands on the vulnerab...

7.4AI score
Exploits0
Rows per page
Query Builder