4034 matches found
CVE-2005-1628
apage.cgi in WebAPP 0.9.9.2.1, and possibly earlier versions, allows remote attackers to execute arbitrary commands via shell metacharacters in the f parameter...
PT-2005-2605 · Webapp · Webapp
Name of the Vulnerable Software and Affected Versions: WebAPP versions 0.9.9.2.1 and earlier Description: The issue allows remote attackers to execute arbitrary commands via shell metacharacters in the f parameter of the apage.cgi page. Recommendations: For WebAPP versions 0.9.9.2.1 and earlier,...
CVE-2005-1550
easymsgb.pl in Easy Message Board allows remote attackers to execute arbitrary commands via shell metacharacters in the print parameter...
CVE-2005-1559
The web module in Neteyes Nexusway allows remote attackers to execute arbitrary commands via hex-encoded shell metacharacters in the ip parameter for 1 nslookup.cgi or 2 ping.cgi...
CVE-2005-1559
The CVE-2005-1559 entry concerns the Web module of Neteyes Nexusway. The vulnerability allows remote command execution via hex-encoded shell metacharacters in the ip parameter of the (1) nslookup.cgi and (2) ping.cgi scripts. Affected software is the Neteyes Nexusway web module; the root cause is...
CVE-2005-1550
CVE-2005-1550 affects Easy Message Board ( Perl-based bulletin board). The OpenVAS details describe an input validation flaw in the remote script, enabling a remote attacker to perform directory traversal or execute arbitrary commands on the host with the web server privileges. The issue is tied ...
CVE-2005-1560
The SSH module in Neteyes Nexusway allows remote attackers to execute arbitrary commands via shell metacharacters in arguments to certain commands, as demonstrated using ping and traceroute...
CVE-2005-1559
The web module in Neteyes Nexusway allows remote attackers to execute arbitrary commands via hex-encoded shell metacharacters in the ip parameter for 1 nslookup.cgi or 2 ping.cgi...
CVE-2005-1560
The SSH module in Neteyes Nexusway allows remote attackers to execute arbitrary commands via shell metacharacters in arguments to certain commands, as demonstrated using ping and traceroute...
CVE-2004-1782
Athena Web Registration (athenareg.php) is vulnerable to remote command execution via shell metacharacters in the pass parameter. Descriptions from CVE-2004-1782 and OpenVAS/Nessus reports confirm a remote-code-execution flaw in the Athena Web Registration server, allowing arbitrary commands to b...
CVE-2004-1888
display.cgi in Aborior Encore WebForum allows remote to execute arbitrary commands via shell metacharacters in the file variable...
CVE-2004-1993
The CVE-2004-1993 issue affects omail webmail 0.98.5 and stems from an incomplete patch to the checklogin function in omail.pl, which allows remote attackers to run arbitrary commands via shell metacharacters such as backticks in the password. NVD lists a CVSS2 base score of 10.0 (NETWORK, LOW co...
CVE-2004-1987
picmgmtbatch.inc.php in Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers with administrative privileges to execute arbitrary commands via shell metacharacters in the 1 $CONFIG'impath' or 2 $CONFIG'jpegqual' parameters...
CVE-2004-1993
The patch to the checklogin function in omail.pl for omail webmail 0.98.5 is incomplete, which allows remote attackers to execute arbitrary commands via shell metacharacters such as "" backticks in the password...
CVE-2004-1782
athenareg.php in Athena Web Registration allows remote attackers to execute arbitrary commands via shell metacharacters in the pass parameter...
CVE-2004-1876
The "%f" feature in the VirusEvent directive in Clam AntiVirus daemon clamd before 0.70 allows local users to execute arbitrary commands via shell metacharacters in a file name...
CVE-2005-1435
Open WebMail OWM before 2.51 20050430 allows remote authenticated users to execute arbitrary commands via shell metacharacters in a filename...
CVE-2005-1435
Open WebMail OWM before 2.51 20050430 allows remote authenticated users to execute arbitrary commands via shell metacharacters in a filename...