CVE-2007-4038

Argument injection vulnerability in Mozilla Firefox before 2.0.0.5, when running on systems with Thunderbird 1.5 installed and certain URIs registered, allows remote attackers to conduct cross-browser scripting attacks and execute arbitrary commands via shell metacharacters in a mailto URI, which...

CVE-2004-1170

a2ps 4.13 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename...

CVE-1999-0210

Automount daemon automountd allows local or remote users to gain privileges via shell metacharacters...

CVE-2015-7698

icewind1991 SMB before 1.0.3 allows remote authenticated users to execute arbitrary SMB commands via shell metacharacters in the user argument in the 1 listShares function in Server.php or the 2 connect or 3 read function in Share.php...

CVE-2015-7698

icewind1991 SMB before 1.0.3 allows remote authenticated users to execute arbitrary SMB commands via shell metacharacters in the user argument in the 1 listShares function in Server.php or the 2 connect or 3 read function in Share.php...

Command injection

icewind1991 SMB before 1.0.3 allows remote authenticated users to execute arbitrary SMB commands via shell metacharacters in the user argument in the 1 listShares function in Server.php or the 2 connect or 3 read function in Share.php...

CVE-2015-7698

CVE-2015-7698 affects ownCloud Server’s external legacy SMB storage. The issue arises from inadequate neutralization of special characters in SMB user input, enabling remote authenticated users to execute arbitrary SMB commands via shell metacharacters in the user argument (affecting listShares i...

Code injection

Endian Firewall before 3.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 NEWPASSWORD1 or 2 NEWPASSWORD2 parameter to cgi-bin/chpasswd.cgi...

CVE-2015-5082

Endian Firewall before 3.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 NEWPASSWORD1 or 2 NEWPASSWORD2 parameter to cgi-bin/chpasswd.cgi...

CVE-2015-5082

Endian Firewall OS Command Injection vulnerability (CVE-2015-5082) affects Endian Firewall where the CGI script cgi-bin/chpasswd.cgi fails to properly sanitize NEW_PASSWORD_1/NEW_PASSWORD_2, enabling remote command execution via shell metacharacters. Public references document related exploits an...

TOTOLINK Router Models Code Execution Vulnerability

TOTOLINK manufactures routers, wireless access points and networking equipment. A code execution vulnerability exists in TOTOLINK Router Models. It allows remote attackers to execute arbitrary commands in the hostname field via shell metacharacters...

Code injection

The escapecommand function in include/Administration/corePerformance/getStats.php in Centreon formerly Merethis Centreon 2.5.4 and earlier fixed in Centreon 19.10.0 uses an incorrect regular expression, which allows remote authenticated users to execute arbitrary commands via shell metacharacters...

CVE-2015-1561

The escapecommand function in include/Administration/corePerformance/getStats.php in Centreon formerly Merethis Centreon 2.5.4 and earlier fixed in Centreon 19.10.0 uses an incorrect regular expression, which allows remote authenticated users to execute arbitrary commands via shell metacharacters...

VulnCheck KEV: CVE-2023-26609

ABUS TVIP 20000-21150 devices allows remote attackers to execute arbitrary code via shell metacharacters in the /cgi-bin/mft/wirelessmft ap field...

Watchguard XCS Arbitrary Command Execution Vulnerability

Watchguard XCS is an all-in-one solution for protection against spam, viruses, corrupted websites, blended threats and cyber-attacks from WatchGuard USA. A security vulnerability exists in Watchguard XCS version 9.2 and build 150522 prior to version 10.0, which stems from the failure of the...

CVE-2015-5453

Watchguard XCS 9.2 and 10.0 before build 150522 allow remote authenticated users to execute arbitrary commands via shell metacharacters in the id parameter to ADMIN/mailqueue.spl...

Code injection

Watchguard XCS 9.2 and 10.0 before build 150522 allow remote authenticated users to execute arbitrary commands via shell metacharacters in the id parameter to ADMIN/mailqueue.spl...

CVE-2015-5453

CVE-2015-5453 affects WatchGuard XCS 9.2 and 10.0 before build 150522. The root cause is failure to filter shell metacharacters in the id parameter of ADMIN/mailqueue.spl, enabling a remote authenticated user to execute arbitrary commands. Public writeups confirm exploitable paths via web interfa...

CVE-2015-4336

cloner.functions.php in the XCloner plugin 3.1.2 for WordPress allows remote authenticated users to execute arbitrary commands via a file containing filenames with shell metacharacters, as demonstrated by using the backup comments feature to create the file...

WordPress Xcloner Plugin and Joomla! Xcloner Plugin Execute Arbitrary Code Vulnerability

WordPress is the WordPress Software Foundation a set of blogging platform developed using the PHP language . Joomla! is the United States Open Source Matters team developed a set of open source content management system CMS. XCloner is one of the plug-ins used to back up and restore data and...