5658 matches found
CVE-2004-2347
The CVE-2004-2347 entry applies to Leif M. Wright Web Blog (blog.cgi) versions 1.1 and 1.1.5. The vulnerability arises in the ViewFile request’s file parameter, where shell metacharacters (e.g., |) enable remote command execution. Impact is remote arbitrary commands executed with the web server u...
CVE-2004-2347: Undefined Security Weakness
blog.cgi in Leif M. Wright Web Blog 1.1 and 1.1.5 allows remote attackers to execute arbitrary commands via shell metacharacters such as '|' in the file parameter of ViewFile requests...
CVE-2005-2547
CVE-2005-2547 affects BlueZ bluez-utils/hcid components. The advisory describes missing input sanitisation in security.c in hcid, enabling remote attackers to execute arbitrary commands by supplying shell metacharacters in the Bluetooth device name during PIN helper invocation. Affected products/...
CVE-2005-2547
security.c in hcid for BlueZ 2.16, 2.17, and 2.18 allows remote attackers to execute arbitrary commands via shell metacharacters in the Bluetooth device name when invoking the PIN helper...
CVE-2005-2547: Undefined Security Weakness
security.c in hcid for BlueZ 2.16, 2.17, and 2.18 allows remote attackers to execute arbitrary commands via shell metacharacters in the Bluetooth device name when invoking the PIN helper...
CVE-2002-2113: Undefined Security Weakness
search.cgi in AGH HTMLsearch 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the template parameter...
CVE-2005-2420
flsearch.pl in FtpLocate 2.02 allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTP GET request...
CVE-2005-2420: Undefined Security Weakness
flsearch.pl in FtpLocate 2.02 allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTP GET request...
USN-158-1: gzip utility vulnerability
zgrep did not handle shell metacharacters like '|' and '&' properly when they occurred in input file names. This could be exploited to execute arbitrary commands with user privileges if zgrep is run in an untrusted directory with specially crafted file names...
CVE-2005-2368
vim 6.3 before 6.3.082, with modelines enabled, allows external user-assisted attackers to execute arbitrary commands via shell metacharacters in the 1 glob or 2 expand commands of a foldexpr expression for calculating fold levels...
CVE-2005-2368
vim 6.3 before 6.3.082, with modelines enabled, allows external user-assisted attackers to execute arbitrary commands via shell metacharacters in the 1 glob or 2 expand commands of a foldexpr expression for calculating fold levels...
CVE-2005-2368
vim 6.3 before 6.3.082, with modelines enabled, allows external user-assisted attackers to execute arbitrary commands via shell metacharacters in the 1 glob or 2 expand commands of a foldexpr expression for calculating fold levels...
DEBIAN-CVE-2005-2368
vim 6.3 before 6.3.082, with modelines enabled, allows external user-assisted attackers to execute arbitrary commands via shell metacharacters in the 1 glob or 2 expand commands of a foldexpr expression for calculating fold levels...
CVE-2005-2368: Improper Neutralization of Special Elements used in an OS Command
vim 6.3 before 6.3.082, with modelines enabled, allows external user-assisted attackers to execute arbitrary commands via shell metacharacters in the 1 glob or 2 expand commands of a foldexpr expression for calculating fold levels...
CVE-2005-2334
The CVE-2005-2334 entry describes a remote command execution vulnerability in Y.SAK where shell metacharacters in the $no variable allow an attacker to run arbitrary commands via three CGI scripts: w_s3mbfm.cgi, w_s3adix.cgi, or w_s3sbfm.cgi. The available sources confirm the vulnerable component...
CVE-2005-2334
Y.SAK allows remote attackers to execute arbitrary commands via shell metacharacters in the $no variable to 1 ws3mbfm.cgi, 2 ws3adix.cgi, or 3 ws3sbfm.cgi...
CVE-2005-2334
Y.SAK allows remote attackers to execute arbitrary commands via shell metacharacters in the $no variable to 1 ws3mbfm.cgi, 2 ws3adix.cgi, or 3 ws3sbfm.cgi...
CVE-2005-2334: Undefined Security Weakness
Y.SAK allows remote attackers to execute arbitrary commands via shell metacharacters in the $no variable to 1 ws3mbfm.cgi, 2 ws3adix.cgi, or 3 ws3sbfm.cgi...
CVE-2004-2284
CVE-2004-2284 affects OpenWebmail prior to 2.32 (vacation.pl). The read_list_from_file function in vacation.pl allows remote attackers to execute arbitrary commands via shell metacharacters in a filename argument, enabling remote code execution with the web server’s privileges. OpenVAS and Nessus...