CVE-2002-1842

Perlbot 1.0 beta allows remote attackers to execute arbitrary commands via shell metacharacters in 1 a word that is being spell checked or 2 an e-mail address...

CVE-2002-1842

CVE-2002-1842 affects Perlbot 1.0 beta. A remote attacker can execute arbitrary commands via shell metacharacters in (1) a word being spell checked or (2) an e‑mail address. The vulnerability impact and exploit details are described in the connected records; no fix or remediation is provided in t...

CVE-2002-1843

Perlbot 1.9.2 is affected. The vulnerability allows remote attackers to execute arbitrary commands by injecting shell metacharacters through (1) the $text variable in SpelCheck.pm or (2) the $filename variable in HTMLPlog.pm. This is a remote, unauthenticated code execution issue with a network a...

CVE-2002-1842: Undefined Security Weakness

Perlbot 1.0 beta allows remote attackers to execute arbitrary commands via shell metacharacters in 1 a word that is being spell checked or 2 an e-mail address...

CVE-2002-1971: Undefined Security Weakness

The ping utility in networkingutils.php in Sourcecraft NetworkingUtils 1.0 allows remote attackers to read arbitrary files via shell metacharacters in the Domain name or IP address argument...

CVE-2002-1843: Undefined Security Weakness

Perlbot 1.9.2 allows remote attackers to execute arbitrary commands via shell metacharacters in 1 the $text variable in SpelCheck.pm or 2 the $filename variable in HTMLPlog.pm...

CVE-2002-1959: Undefined Security Weakness

Nagios 1.0b1 through 1.0b3 allows remote attackers to execute arbitrary commands via shell metacharacters in plugin output...

CVE-2002-1874: Improper Input Validation

astrocam.cgi in AstroCam 0.9-1-1 through 1.4.0 allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTP request. NOTE: earlier disclosures stated that the affected versions were 1.7.1 through 2.1.2, but the vendor explicitly stated that these were incorrect...

CVE-2002-1854: Undefined Security Weakness

Rlaj whois CGI script whois.cgi 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the domain name field...

CVE-2001-1502

webcart.cgi in Mountain Network Systems WebCart 8.4 allows remote attackers to execute arbitrary commands via shell metacharacters in the NEXTPAGE parameter...

CVE-2001-1502: Undefined Security Weakness

webcart.cgi in Mountain Network Systems WebCart 8.4 allows remote attackers to execute arbitrary commands via shell metacharacters in the NEXTPAGE parameter...

CVE-2001-1495: Undefined Security Weakness

networkquery.php in Network Query Tool 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the target parameter...

CVE-2005-1949

The epingvalidaddr function in functions.php for the ePing plugin for e107 portal allows remote attackers to execute arbitrary commands via shell metacharacters after a valid argument to the epinghost parameter...

CVE-2005-1960

The getemails function in C.J. Steele Tattle allows remote attackers to execute arbitrary commands via shell metacharacters in certain log entries, as demonstrated using shell metacharacters in an FTP username...

CVE-2005-1960

The CVE-2005-1960 entry relates to the getemails function in C.J. Steele Tattle, where remote attackers can run arbitrary commands by injecting shell metacharacters into log entries (demonstrated via an FTP username). This is a shell-command injection affecting the vulnerable component and is exp...

CVE-2005-1966

The eTracevalidaddr function in eTrace plugin for e107 portal allows remote attackers to execute arbitrary commands via shell metacharacters after a valid argument to the etracehost parameter...

CVE-2005-1966

The CVE-2005-1966 issue affects the e107 content portal via the eTrace plugin: the eTrace_validaddr function allows remote attackers to run arbitrary commands by injecting shell metacharacters after a valid etrace_host argument. The NASL plug-in also describes a DOTRACE path where etrace_cmd/etra...

CVE-2005-1950

hints.pl in Webhints 1.03 allows remote attackers to execute arbitrary commands via shell metacharacters in the argument...

CVE-2005-1966: Undefined Security Weakness

The eTracevalidaddr function in eTrace plugin for e107 portal allows remote attackers to execute arbitrary commands via shell metacharacters after a valid argument to the etracehost parameter...

CVE-2005-1949: Undefined Security Weakness

The epingvalidaddr function in functions.php for the ePing plugin for e107 portal allows remote attackers to execute arbitrary commands via shell metacharacters after a valid argument to the epinghost parameter...