CVE-2004-2776

go.cgi in GoScript 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 query string or 2 artarchive parameter...

Cross site request forgery (csrf)

The handlerequest function in lib/HTTPServer.pm in Monitorix before 3.3.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the URI...

CVE-2013-7070

The handlerequest function in lib/HTTPServer.pm in Monitorix before 3.3.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the URI...

CVE-2004-2776

go.cgi in GoScript 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 query string or 2 artarchive parameter...

CVE-2019-20197

In Nagios XI 5.6.9, an authenticated user is able to execute arbitrary OS commands via shell metacharacters in the id parameter to schedulereport.php, in the context of the web-server user account...

Design/Logic Flaw

In Nagios XI 5.6.9, an authenticated user is able to execute arbitrary OS commands via shell metacharacters in the id parameter to schedulereport.php, in the context of the web-server user account...

PT-2019-16122

Name of the Vulnerable Software and Affected Versions Nagios XI version 5.6.9 Description The issue allows an authenticated user to execute arbitrary OS commands via shell metacharacters in the id parameter to "schedulereport.php", in the context of the web-server user account. Recommendations Fo...

PT-2019-6472

Name of the Vulnerable Software and Affected Versions GoScript version 2.0 Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in the query string or the artarchive parameter. This can be exploited through the go.cgi endpoint. Recommendations For...

CVE-2004-2776: Undefined Security Weakness

go.cgi in GoScript 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 query string or 2 artarchive parameter...

PT-2019-7003

Name of the Vulnerable Software and Affected Versions Monitorix versions prior to 3.3.1 Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in the URI, due to a problem in the handle request function in lib/HTTPServer.pm. Recommendations For versio...

CVE-2013-7070: Improper Neutralization of Special Elements in Output Used by a Downstream Component

The handlerequest function in lib/HTTPServer.pm in Monitorix before 3.3.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the URI...

D-Link DAP-1860 Remote Code Execution Vulnerability

The D-Link DAP-1860 is a WiFi range extender from AUO D-Link of Taiwan, China. A remote code execution vulnerability exists in the D-Link DAP-1860. The vulnerability can be exploited by an attacker to execute arbitrary code with root privileges with the help of shell metacharacters in the HNAPAUT...

PT-2019-15883

Name of the Vulnerable Software and Affected Versions D-Link DAP-1860 versions prior to v1.04b03 Beta Description The issue allows for arbitrary remote code execution as root without authentication. This is achieved via shell metacharacters within an HNAP AUTH HTTP header. Recommendations For...

CVE-2019-19597: Incorrect Authorization

D-Link DAP-1860 devices before v1.04b03 Beta allow arbitrary remote code execution as root without authentication via shell metacharacters within an HNAPAUTH HTTP header...

EulerOS 2.0 SP2 : oprofile (EulerOS-SA-2019-2516)

According to the version of the oprofile packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to conduct eval injection attacks and gain privileges via shell...

CVE-2019-19469

In Zmanda Management Console 3.3.9, ZMCAdminAdvanced?form=adminTasks&action=Apply&command= allows CSRF, as demonstrated by command injection with shell metacharacters. This may depend on weak default credentials...

CVE-2019-19469

In Zmanda Management Console 3.3.9, ZMCAdminAdvanced?form=adminTasks&action=Apply&command= allows CSRF, as demonstrated by command injection with shell metacharacters. This may depend on weak default credentials...

CVE-2019-19469: Improper Neutralization of Special Elements used in an OS Command

In Zmanda Management Console 3.3.9, ZMCAdminAdvanced?form=adminTasks&action=Apply&command= allows CSRF, as demonstrated by command injection with shell metacharacters. This may depend on weak default credentials...

Crestron Electronics DMC-STRO Operating System Command Injection Vulnerability

The Crestron Electronics DMC-STRO is a streaming input card for receiving streaming video signals from Crestron Electronics, USA. The Crestron Electronics DMC-STRO suffers from an operating system command injection vulnerability. The vulnerability can be exploited by an attacker to execute comman...

Code injection

The DHCPv6 client dhcp6c as used in the dhcpv6 project through 2011-07-25 allows remote DHCP servers to execute arbitrary commands via shell metacharacters in a hostname obtained from a DHCP message...