CVE-2005-2368

vim 6.3 before 6.3.082, with modelines enabled, allows external user-assisted attackers to execute arbitrary commands via shell metacharacters in the 1 glob or 2 expand commands of a foldexpr expression for calculating fold levels...

DEBIAN-CVE-2005-2368

vim 6.3 before 6.3.082, with modelines enabled, allows external user-assisted attackers to execute arbitrary commands via shell metacharacters in the 1 glob or 2 expand commands of a foldexpr expression for calculating fold levels...

CVE-2005-2368

vim 6.3 before 6.3.082, with modelines enabled, allows external user-assisted attackers to execute arbitrary commands via shell metacharacters in the 1 glob or 2 expand commands of a foldexpr expression for calculating fold levels...

CVE-2005-2368

vim 6.3 before 6.3.082, with modelines enabled, allows external user-assisted attackers to execute arbitrary commands via shell metacharacters in the 1 glob or 2 expand commands of a foldexpr expression for calculating fold levels...

CVE-2005-2368: Improper Neutralization of Special Elements used in an OS Command

vim 6.3 before 6.3.082, with modelines enabled, allows external user-assisted attackers to execute arbitrary commands via shell metacharacters in the 1 glob or 2 expand commands of a foldexpr expression for calculating fold levels...

CVE-2005-2334

The CVE-2005-2334 entry describes a remote command execution vulnerability in Y.SAK where shell metacharacters in the $no variable allow an attacker to run arbitrary commands via three CGI scripts: w_s3mbfm.cgi, w_s3adix.cgi, or w_s3sbfm.cgi. The available sources confirm the vulnerable component...

CVE-2005-2334

Y.SAK allows remote attackers to execute arbitrary commands via shell metacharacters in the $no variable to 1 ws3mbfm.cgi, 2 ws3adix.cgi, or 3 ws3sbfm.cgi...

CVE-2005-2334

Y.SAK allows remote attackers to execute arbitrary commands via shell metacharacters in the $no variable to 1 ws3mbfm.cgi, 2 ws3adix.cgi, or 3 ws3sbfm.cgi...

CVE-2005-2334: Undefined Security Weakness

Y.SAK allows remote attackers to execute arbitrary commands via shell metacharacters in the $no variable to 1 ws3mbfm.cgi, 2 ws3adix.cgi, or 3 ws3sbfm.cgi...

CVE-2004-2275

The CVE-2004-2275 entry concerns i-mall.cgi in I-Mall Commerce, where remote command execution is possible via shell metacharacters in the p parameter. The vulnerability stems from insufficient input sanitization in i-mall.cgi, enabling an attacker to pass arbitrary shell commands to the remote s...

CVE-2004-2275

i-mall.cgi in I-Mall Commerce allows remote attackers to execute arbitrary commands via shell metacharacters via the p parameter...

CVE-2004-2284

CVE-2004-2284 affects OpenWebmail prior to 2.32 (vacation.pl). The read_list_from_file function in vacation.pl allows remote attackers to execute arbitrary commands via shell metacharacters in a filename argument, enabling remote code execution with the web server’s privileges. OpenVAS and Nessus...

CVE-2004-2284

The readlistfromfile function in vacation.pl for OpenWebmail before 2.32 20040629 allows remote attackers to execute arbitrary commands via shell metacharacters in a filename argument...

CVE-2004-2275: Undefined Security Weakness

i-mall.cgi in I-Mall Commerce allows remote attackers to execute arbitrary commands via shell metacharacters via the p parameter...

CVE-2004-2284: Undefined Security Weakness

The readlistfromfile function in vacation.pl for OpenWebmail before 2.32 20040629 allows remote attackers to execute arbitrary commands via shell metacharacters in a filename argument...

CVE-2005-2290

wpsshop.cgi in WPS Web Portal System 0.7.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 art and 2 cat variables...

CVE-2005-2290: Undefined Security Weakness

wpsshop.cgi in WPS Web Portal System 0.7.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 art and 2 cat variables...

CVE-2005-2277

Bluetooth FTP client BTFTP in Nokia Affix 2.1.2 and 3.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename argument of a PUT command...

CVE-2005-2277: Undefined Security Weakness

Bluetooth FTP client BTFTP in Nokia Affix 2.1.2 and 3.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename argument of a PUT command...

CVE-2002-2047

The CVE-2002-2047 entry describes a vulnerability in the file preview feature of Sketch (version 0.6.12 and earlier). The issue is that remote attackers can execute arbitrary commands by supplying shell metacharacters in the filename of an encapsulated Postscript (EPS) file, exploiting the previe...