CVE-2013-7394: Improper Control of Generation of Code

The "runshellscript echo.sh" script in Splunk before 5.0.5 allows remote authenticated users to execute arbitrary commands via a crafted string. NOTE: this issue was SPLIT from CVE-2013-6771 per ADT2 due to different vulnerability types...

PT-2014-3417

Name of the Vulnerable Software and Affected Versions Splunk versions prior to 5.0.5 Description The issue allows remote authenticated users to execute arbitrary commands via a crafted string in the "runshellscript echo.sh" script. Recommendations For versions prior to 5.0.5, update to version...