5185 matches found
CVE-2005-1304
CVE-2005-1304 affects the citat.pl script. The exposed vulnerability allows remote attackers to execute arbitrary files by supplying shell metacharacters in the argument. The available documents confirm the issue and its impact (arbitrary command/file execution) but do not provide exploit details...
CVE-2005-1296
The CVE-2005-1296 issue involves an include.cgi script that allows remote attackers to execute arbitrary commands via shell metacharacters in the argument. The available data indicate a remote, network-accessible flaw with a CVSSv2 base score of 7.5 (High) and partial impacts to confidentiality, ...
CVE-2005-1296
include.cgi script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument...
CVE-2005-1299
The inserter.cgi script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument...
CVE-2005-1299: Undefined Security Weakness
The inserter.cgi script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument...
CVE-2005-1289: Undefined Security Weakness
index.cgi in E-Cart 2004 1.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 art and possibly 2 cat parameters...
CVE-2005-1296: Undefined Security Weakness
include.cgi script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument...
CVE-2005-1304: Undefined Security Weakness
The citat.pl script allows remote attackers to execute arbitrary files via shell metacharacters in the argument...
CVE-2005-1299
The inserter.cgi script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument...
CVE-2005-1296
include.cgi script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument...
CVE-2000-1223
CVE-2000-1223 affects Quikstore Shopping Cart: quikstore.cgi is vulnerable to remote command execution via shell metacharacters in the URL portion of an HTTP GET request. The issue enables arbitrary commands to be executed on the server. Connected sources (Red Hat advisory, CVE records, and NVD) ...
CVE-2000-1223: Undefined Security Weakness
quikstore.cgi in Quikstore Shopping Cart allows remote attackers to execute arbitrary commands via shell metacharacters in the URL portion of an HTTP GET request...
security flaw
xloadimage before 4.1-r2, and xli before 1.17, allows attackers to execute arbitrary commands via shell metacharacters in filenames for compressed images, which are not properly quoted when calling the gunzip command...
DEBIAN-CVE-2004-1175
fish.c in midnight commander allows remote attackers to execute arbitrary programs via "insecure filename quoting," possibly using shell metacharacters...
CVE-2005-0130
Certain Perl scripts in Konversation 0.15 allow remote attackers to execute arbitrary commands via shell metacharacters in 1 channel names or 2 song names that are not properly quoted when the user runs IRC scripts...
DEBIAN-CVE-2005-0130
Certain Perl scripts in Konversation 0.15 allow remote attackers to execute arbitrary commands via shell metacharacters in 1 channel names or 2 song names that are not properly quoted when the user runs IRC scripts...
CVE-2004-1175
fish.c in midnight commander allows remote attackers to execute arbitrary programs via "insecure filename quoting," possibly using shell metacharacters...
CVE-2004-1175
fish.c in midnight commander allows remote attackers to execute arbitrary programs via "insecure filename quoting," possibly using shell metacharacters...