5658 matches found
CVE-2001-0937
CVE-2001-0937 concerns PGPMail.pl CGI (up to version 1.31) where the recipient and pgpuserid CGI variables are not properly filtered before being passed to shell commands. This allows remote attackers to execute arbitrary commands on the server with the web server’s privileges. OpenVAS and Nessus...
CVE-2001-0997: Undefined Security Weakness
Textor Webmasters Ltd listrec.pl CGI program allows remote attackers to execute arbitrary commands via shell metacharacters in the TEMPLATE parameter...
CVE-2001-0937: Undefined Security Weakness
PGPMail.pl 1.31 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 recipient or 2 pgpuserid parameters...
CVE-2001-0956: Undefined Security Weakness
speechd 0.54 and earlier, with the Festival or rsynth speech synthesis package, allows attackers to execute arbitrary commands via shell metacharacters...
CVE-2001-0992: Undefined Security Weakness
shopplus.cgi in ShopPlus shopping cart allows remote attackers to execute arbitrary commands via shell metacharacters in the "file" parameter...
CVE-2001-0930: Undefined Security Weakness
Sendpage.pl allows remote attackers to execute arbitrary commands via a message containing shell metacharacters...
CVE-2001-1014: Undefined Security Weakness
eshop.pl in WebDiscounteshop allows remote attackers to execute arbitrary commands via shell metacharacters in the seite parameter...
CVE-2001-0985: Undefined Security Weakness
shop.pl in Hassan Consulting Shopping Cart 1.23 allows remote attackers to execute arbitrary commands via shell metacharacters in the "page" parameter...
CVE-2001-1214
manual.php in Marcus S. Xenakis Unix Manual 1.0 allows remote attackers to execute arbitrary code via a URL that contains shell metacharacters...
CVE-2001-0844
Vulnerability in 1 Book of guests and 2 Post it! allows remote attackers to execute arbitrary code via shell metacharacters in the email parameter...
CVE-2001-0937
PGPMail.pl 1.31 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 recipient or 2 pgpuserid parameters...
CVE-2001-0930
Sendpage.pl allows remote attackers to execute arbitrary commands via a message containing shell metacharacters...
CVE-2001-0800
CVE-2001-0800 affects the IRIX lpsched service; IRIX 6.5.13f and earlier allow remote command execution via shell metacharacters. Public disclosures include a Metasploit module (tagprinter_exec) and exploit references, with SGI patch advisories available in the linked references. Affected compone...
CVE-2001-0800: Undefined Security Weakness
lpsched in IRIX 6.5.13f and earlier allows remote attackers to execute arbitrary commands via shell metacharacters...
CVE-2001-0844: Undefined Security Weakness
Vulnerability in 1 Book of guests and 2 Post it! allows remote attackers to execute arbitrary code via shell metacharacters in the email parameter...
CVE-2001-0899
Network Tools 0.2 for PHP-Nuke allows remote attackers to execute commands on the server via shell metacharacters in the $hostinput variable...
Shell-метасимволы в Network Tool PHP (shell metacharacters)
Не фильтруются метасимволы при вызове внешней программы...
CVE-2001-0439
CVE-2001-0439 affects Licq prior to 1.0.3. The vulnerability stems from how Licq parses received URLs: the URL is passed to the web browser via system() without sufficient input validation, allowing a remote attacker to inject shell metacharacters and execute arbitrary commands. Impact is remote ...
