CVE-2005-0362

awstats.pl in AWStats 6.2 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 "pluginmode", 2 "loadplugin", or 3 "noloadplugin" parameters...

CVE-2005-0362: Undefined Security Weakness

awstats.pl in AWStats 6.2 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 "pluginmode", 2 "loadplugin", or 3 "noloadplugin" parameters...

CVE-2005-0363: Undefined Security Weakness

awstats.pl in AWStats 4.0 and 6.2 allows remote attackers to execute arbitrary commands via shell metacharacters in the config parameter...

CVE-2004-1468

CVE-2004-1468 affects Webmin 1.x and Usermin 1.x. The webmail feature contains an input validation bug that allows a remote attacker to execute arbitrary commands by sending specially crafted e-mails with shell metacharacters, leading to remote code execution with the privileges of the Webmin/Use...

CVE-2004-1456

filediff in CVStrac allows remote attackers to execute arbitrary commands via shell metacharacters in rcsinfo...

CVE-2004-1468: Undefined Security Weakness

The web mail functionality in Usermin 1.x and Webmin 1.x allows remote attackers to execute arbitrary commands via shell metacharacters in an e-mail message...

CVE-2004-1456: Undefined Security Weakness

filediff in CVStrac allows remote attackers to execute arbitrary commands via shell metacharacters in rcsinfo...

CVE-2005-0362

awstats.pl in AWStats 6.2 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 "pluginmode", 2 "loadplugin", or 3 "noloadplugin" parameters...

DEBIAN-CVE-2005-0362

awstats.pl in AWStats 6.2 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 "pluginmode", 2 "loadplugin", or 3 "noloadplugin" parameters...

CVE-2005-0239

viewcert.php in the S/MIME plugin 0.4 and 0.5 for Squirrelmail allows remote attackers to execute arbitrary commands via shell metacharacters in the cert parameter...

CVE-2005-0239: Undefined Security Weakness

viewcert.php in the S/MIME plugin 0.4 and 0.5 for Squirrelmail allows remote attackers to execute arbitrary commands via shell metacharacters in the cert parameter...

CVE-2005-0183: Undefined Security Weakness

ftpfile in the Vacation plugin 0.15 and earlier for Squirrelmail allows local users to execute arbitrary commands via shell metacharacters in a command line argument...

security flaw

The EPSF pipe support in enscript 1.6.3 allows remote attackers or local users to execute arbitrary commands via shell metacharacters...

CVE-2005-0015

The CVE-2005-0015 issue concerns diatheke.pl in Sword 1.5.7a, where missing input sanitising enables remote attackers to execute arbitrary commands via shell metacharacters in a URL. Public sources (Debian DSA-650-1, OpenVAS DSAs) confirm a remote command-execution vulnerability in Sword’s CGI sc...

CVE-2004-1184

The EPSF pipe support in enscript 1.6.3 allows remote attackers or local users to execute arbitrary commands via shell metacharacters...

CVE-2005-0015

diatheke.pl in Sword 1.5.7a allows remote attackers to execute arbitrary commands via shell metacharacters in a URL...

CVE-2004-1184

The EPSF pipe support in enscript 1.6.3 allows remote attackers or local users to execute arbitrary commands via shell metacharacters...

CVE-2005-0015: Undefined Security Weakness

diatheke.pl in Sword 1.5.7a allows remote attackers to execute arbitrary commands via shell metacharacters in a URL...

CVE-2004-1184: Undefined Security Weakness

The EPSF pipe support in enscript 1.6.3 allows remote attackers or local users to execute arbitrary commands via shell metacharacters...

CVE-2004-1175

CVE-2004-1175 affects Midnight Commander (mc); the fish protocol handler allows remote code execution via insecure filename quoting, potentially with shell metacharacters. Public advisories (e.g., Debian DSA-639-1, Red Hat RHSA-2005:512, CentOS advisory) describe the issue and list the affected M...