CVE-2002-2047

The CVE-2002-2047 entry describes a vulnerability in the file preview feature of Sketch (version 0.6.12 and earlier). The issue is that remote attackers can execute arbitrary commands by supplying shell metacharacters in the filename of an encapsulated Postscript (EPS) file, exploiting the previe...

CVE-2002-2047

The file preview functionality in Sketch 0.6.12 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the filename of an encapsulated Postscript EPS file...

CVE-2002-2047

The file preview functionality in Sketch 0.6.12 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the filename of an encapsulated Postscript EPS file...

CVE-2002-1993

The CVE-2002-1993 entry affects WebBBS 4 and 5.0, where webbbs_post.pl fails to sanitize shell metacharacters in the followup parameter, enabling remote command execution. The underlying issue is improper handling of shell commands, allowing an attacker to run arbitrary commands on the affected s...

CVE-2005-2259

The dispallclosed2 function in dispallclosed.pl for multiple USANet Creations products, including 1 USANet Shopping Mall Software, 2 Domain Name Auction Software, 3 Standard Classified Ads Software, and 4 MakeBid Reverse Auction allows remote attackers to execute arbitrary code via shell...

CVE-2005-2205

The CVE-2005-2205 entry describes a vulnerability in the ReadLog function of kaiseki.cgi in pngren, where remote attackers can execute arbitrary commands by supplying shell metacharacters in the query string. This is tied to a web-facing CGI component (kg ren/pngren) that processes input in a way...

CVE-2005-2178

probe.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the olddat parameter. NOTE: it is unclear which product or vendor this program is associated with, if any...

CVE-2005-2178

probe.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the olddat parameter. NOTE: it is unclear which product or vendor this program is associated with, if any...

CVE-2005-2165

read.cgi in GlobalNoteScript allows remote attackers to execute arbitrary commands via shell metacharacters in the file parameters...

CVE-2005-2165

read.cgi in GlobalNoteScript allows remote attackers to execute arbitrary commands via shell metacharacters in the file parameters...

CVE-2005-2082

imtrbbs.cgi in imTRSET 1.02 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the df parameter...

CVE-2002-1842

Perlbot 1.0 beta allows remote attackers to execute arbitrary commands via shell metacharacters in 1 a word that is being spell checked or 2 an e-mail address...

CVE-2002-1874

astrocam.cgi in AstroCam 0.9-1-1 through 1.4.0 allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTP request. NOTE: earlier disclosures stated that the affected versions were 1.7.1 through 2.1.2, but the vendor explicitly stated that these were incorrect...

CVE-2002-1971

The ping utility in networkingutils.php in Sourcecraft NetworkingUtils 1.0 allows remote attackers to read arbitrary files via shell metacharacters in the Domain name or IP address argument...

CVE-2002-1959

Nagios 1.0b1 through 1.0b3 allows remote attackers to execute arbitrary commands via shell metacharacters in plugin output...

CVE-2002-1842

CVE-2002-1842 affects Perlbot 1.0 beta. A remote attacker can execute arbitrary commands via shell metacharacters in (1) a word being spell checked or (2) an e‑mail address. The vulnerability impact and exploit details are described in the connected records; no fix or remediation is provided in t...

CVE-2002-1843

Perlbot 1.9.2 is affected. The vulnerability allows remote attackers to execute arbitrary commands by injecting shell metacharacters through (1) the $text variable in SpelCheck.pm or (2) the $filename variable in HTMLPlog.pm. This is a remote, unauthenticated code execution issue with a network a...

CVE-2001-1502

webcart.cgi in Mountain Network Systems WebCart 8.4 allows remote attackers to execute arbitrary commands via shell metacharacters in the NEXTPAGE parameter...

CVE-2005-1949

The epingvalidaddr function in functions.php for the ePing plugin for e107 portal allows remote attackers to execute arbitrary commands via shell metacharacters after a valid argument to the epinghost parameter...

CVE-2005-1960

The getemails function in C.J. Steele Tattle allows remote attackers to execute arbitrary commands via shell metacharacters in certain log entries, as demonstrated using shell metacharacters in an FTP username...