5227 matches found
CVE-2005-0638
xloadimage before 4.1-r2, and xli before 1.17, allows attackers to execute arbitrary commands via shell metacharacters in filenames for compressed images, which are not properly quoted when calling the gunzip command...
CVE-2004-1037
The search function in TWiki 20030201 allows remote attackers to execute arbitrary commands via shell metacharacters in a search string...
CVE-2004-1037
The search function in TWiki 20030201 allows remote attackers to execute arbitrary commands via shell metacharacters in a search string...
CVE-2004-1710
The CVE-2004-1710 entry describes a remote command execution vulnerability in page.cgi, exploitable by sending shell metacharacters via the url parameter. The available sources do not specify affected products, versions, root cause specifics beyond the described command-injection vector, or concr...
CVE-2004-1710: Undefined Security Weakness
page.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the url parameter...
CVE-2005-0363
awstats.pl in AWStats 4.0 and 6.2 allows remote attackers to execute arbitrary commands via shell metacharacters in the config parameter...
CVE-2005-0362
awstats.pl in AWStats 6.2 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 "pluginmode", 2 "loadplugin", or 3 "noloadplugin" parameters...
CVE-2005-0362
awstats.pl in AWStats 6.2 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 "pluginmode", 2 "loadplugin", or 3 "noloadplugin" parameters...
CVE-2005-0363
AWStats CVE-2005-0363 affects awstats.pl in AWStats 4.0 and 6.2, where insufficient input sanitization allows remote attackers to execute arbitrary shell commands via shell metacharacters in the config parameter. The issue enables remote, unauthenticated command execution with web server privileg...
CVE-2005-0363
awstats.pl in AWStats 4.0 and 6.2 allows remote attackers to execute arbitrary commands via shell metacharacters in the config parameter...
CVE-2005-0362
CVE-2005-0362 affects AWStats (awstats.pl) with AWStats 6.2, where remote attackers can execute arbitrary commands by injecting shell metacharacters into the parameters 1) pluginmode, 2) loadplugin, or 3) noloadplugin. The issue arises from improper handling/sanitation of user-supplied input in t...
CVE-2005-0363: Undefined Security Weakness
awstats.pl in AWStats 4.0 and 6.2 allows remote attackers to execute arbitrary commands via shell metacharacters in the config parameter...
CVE-2005-0362: Undefined Security Weakness
awstats.pl in AWStats 6.2 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 "pluginmode", 2 "loadplugin", or 3 "noloadplugin" parameters...
CVE-2004-1456
filediff in CVStrac allows remote attackers to execute arbitrary commands via shell metacharacters in rcsinfo...
CVE-2004-1468
CVE-2004-1468 affects Webmin 1.x and Usermin 1.x. The webmail feature contains an input validation bug that allows a remote attacker to execute arbitrary commands by sending specially crafted e-mails with shell metacharacters, leading to remote code execution with the privileges of the Webmin/Use...
CVE-2004-1456: Undefined Security Weakness
filediff in CVStrac allows remote attackers to execute arbitrary commands via shell metacharacters in rcsinfo...
CVE-2004-1468: Undefined Security Weakness
The web mail functionality in Usermin 1.x and Webmin 1.x allows remote attackers to execute arbitrary commands via shell metacharacters in an e-mail message...
DEBIAN-CVE-2005-0362
awstats.pl in AWStats 6.2 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 "pluginmode", 2 "loadplugin", or 3 "noloadplugin" parameters...