5658 matches found
CVE-2002-1660: Improper Neutralization of Special Elements used in an OS Command
calendar.php in vBulletin before 2.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the command parameter...
CVE-2003-1202: Undefined Security Weakness
The checklogin function in omail.pl for omail webmail 0.98.4 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in a 1 password, 2 domainname, or 3 username...
CVE-2004-1993: Undefined Security Weakness
The patch to the checklogin function in omail.pl for omail webmail 0.98.5 is incomplete, which allows remote attackers to execute arbitrary commands via shell metacharacters such as "" backticks in the password...
CVE-2004-1888: Undefined Security Weakness
display.cgi in Aborior Encore WebForum allows remote to execute arbitrary commands via shell metacharacters in the file variable...
CVE-2004-1876: Undefined Security Weakness
The "%f" feature in the VirusEvent directive in Clam AntiVirus daemon clamd before 0.70 allows local users to execute arbitrary commands via shell metacharacters in a file name...
CVE-2004-1782: Undefined Security Weakness
athenareg.php in Athena Web Registration allows remote attackers to execute arbitrary commands via shell metacharacters in the pass parameter...
CVE-2005-1435
Open WebMail OWM before 2.51 20050430 allows remote authenticated users to execute arbitrary commands via shell metacharacters in a filename...
CVE-2005-1435
Open WebMail OWM before 2.51 20050430 allows remote authenticated users to execute arbitrary commands via shell metacharacters in a filename...
CVE-2005-1435: Undefined Security Weakness
Open WebMail OWM before 2.51 20050430 allows remote authenticated users to execute arbitrary commands via shell metacharacters in a filename...
CVE-2005-0363
awstats.pl in AWStats 4.0 and 6.2 allows remote attackers to execute arbitrary commands via shell metacharacters in the config parameter...
CVE-2005-0927
Unknown vulnerability in subs.pl for WebAPP 0.9.9 through 0.9.9.2 has unknown impact and attack vectors, probably involving shell metacharacters or .. sequences...
CVE-2005-1304
The citat.pl script allows remote attackers to execute arbitrary files via shell metacharacters in the argument...
CVE-2005-1289
index.cgi in E-Cart 2004 1.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 art and possibly 2 cat parameters...
CVE-2005-1358
text.cgi script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument...
CVE-2005-0363
awstats.pl in AWStats 4.0 and 6.2 allows remote attackers to execute arbitrary commands via shell metacharacters in the config parameter...
CVE-2005-0183
ftpfile in the Vacation plugin 0.15 and earlier for Squirrelmail allows local users to execute arbitrary commands via shell metacharacters in a command line argument...
CVE-2005-0015
diatheke.pl in Sword 1.5.7a allows remote attackers to execute arbitrary commands via shell metacharacters in a URL...
DEBIAN-CVE-2005-0363
awstats.pl in AWStats 4.0 and 6.2 allows remote attackers to execute arbitrary commands via shell metacharacters in the config parameter...