5658 matches found
CVE-2003-1202: Undefined Security Weakness
The checklogin function in omail.pl for omail webmail 0.98.4 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in a 1 password, 2 domainname, or 3 username...
CVE-2004-1888: Undefined Security Weakness
display.cgi in Aborior Encore WebForum allows remote to execute arbitrary commands via shell metacharacters in the file variable...
CVE-2004-1782: Undefined Security Weakness
athenareg.php in Athena Web Registration allows remote attackers to execute arbitrary commands via shell metacharacters in the pass parameter...
CVE-2004-1993: Undefined Security Weakness
The patch to the checklogin function in omail.pl for omail webmail 0.98.5 is incomplete, which allows remote attackers to execute arbitrary commands via shell metacharacters such as "" backticks in the password...
CVE-2004-1876: Undefined Security Weakness
The "%f" feature in the VirusEvent directive in Clam AntiVirus daemon clamd before 0.70 allows local users to execute arbitrary commands via shell metacharacters in a file name...
CVE-2004-1987: Undefined Security Weakness
picmgmtbatch.inc.php in Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers with administrative privileges to execute arbitrary commands via shell metacharacters in the 1 $CONFIG'impath' or 2 $CONFIG'jpegqual' parameters...
CVE-2005-1435
Open WebMail OWM before 2.51 20050430 allows remote authenticated users to execute arbitrary commands via shell metacharacters in a filename...
CVE-2005-1435
Open WebMail OWM before 2.51 20050430 allows remote authenticated users to execute arbitrary commands via shell metacharacters in a filename...
CVE-2005-1435: Undefined Security Weakness
Open WebMail OWM before 2.51 20050430 allows remote authenticated users to execute arbitrary commands via shell metacharacters in a filename...
DEBIAN-CVE-2005-0363
awstats.pl in AWStats 4.0 and 6.2 allows remote attackers to execute arbitrary commands via shell metacharacters in the config parameter...
DEBIAN-CVE-2005-0015
diatheke.pl in Sword 1.5.7a allows remote attackers to execute arbitrary commands via shell metacharacters in a URL...
CVE-2005-0363
awstats.pl in AWStats 4.0 and 6.2 allows remote attackers to execute arbitrary commands via shell metacharacters in the config parameter...
CVE-2005-1351
The ad.cgi script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument...
CVE-2005-1354
The forum.pl script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument...
CVE-2005-1358
text.cgi script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument...
CVE-2005-1289
index.cgi in E-Cart 2004 1.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 art and possibly 2 cat parameters...
CVE-2005-1304
The citat.pl script allows remote attackers to execute arbitrary files via shell metacharacters in the argument...
CVE-2005-0927
Unknown vulnerability in subs.pl for WebAPP 0.9.9 through 0.9.9.2 has unknown impact and attack vectors, probably involving shell metacharacters or .. sequences...