CVE-2005-1299

The inserter.cgi script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument...

CVE-2005-1296

include.cgi script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument...

CVE-2000-1223

CVE-2000-1223 affects Quikstore Shopping Cart: quikstore.cgi is vulnerable to remote command execution via shell metacharacters in the URL portion of an HTTP GET request. The issue enables arbitrary commands to be executed on the server. Connected sources (Red Hat advisory, CVE records, and NVD) ...

security flaw

xloadimage before 4.1-r2, and xli before 1.17, allows attackers to execute arbitrary commands via shell metacharacters in filenames for compressed images, which are not properly quoted when calling the gunzip command...

CVE-2005-0130

Certain Perl scripts in Konversation 0.15 allow remote attackers to execute arbitrary commands via shell metacharacters in 1 channel names or 2 song names that are not properly quoted when the user runs IRC scripts...

CVE-2004-1175

fish.c in midnight commander allows remote attackers to execute arbitrary programs via "insecure filename quoting," possibly using shell metacharacters...

DEBIAN-CVE-2004-1175

fish.c in midnight commander allows remote attackers to execute arbitrary programs via "insecure filename quoting," possibly using shell metacharacters...

DEBIAN-CVE-2005-0130

Certain Perl scripts in Konversation 0.15 allow remote attackers to execute arbitrary commands via shell metacharacters in 1 channel names or 2 song names that are not properly quoted when the user runs IRC scripts...

CVE-2004-1175

fish.c in midnight commander allows remote attackers to execute arbitrary programs via "insecure filename quoting," possibly using shell metacharacters...

CVE-2004-1175

fish.c in midnight commander allows remote attackers to execute arbitrary programs via "insecure filename quoting," possibly using shell metacharacters...

CVE-2005-0927

Unknown vulnerability in subs.pl for WebAPP 0.9.9 through 0.9.9.2 has unknown impact and attack vectors, probably involving shell metacharacters or .. sequences...

Multiple xloadimage image viewer bugs

Buffer overflows, shell metacharacters problem...

CVE-2003-1128

XMMS.pm in X2 XMMS Remote, as obtained from the vendor server between 4 AM 11 AM PST on May 7, 2003, allows remote attackers to execute arbitrary commands via shell metacharacters in a request to TCP port 8086...

CVE-2004-1770

The login page for cPanel 9.1.0, and possibly other versions, allows remote attackers to execute arbitrary code via shell metacharacters in the user parameter...

CVE-2004-1770

CVE-2004-1770 affects the login page of cPanel 9.1.0 and possibly earlier . The issue arises from improper handling of the user parameter , allowing remote attackers to execute arbitrary code via shell metacharacters. The vulnerability is described as remote code execution with high impact (netwo...

EUVD-2004-1764

The login page for cPanel 9.1.0, and possibly other versions, allows remote attackers to execute arbitrary code via shell metacharacters in the user parameter...

CVE-2005-0689

The Includer project (The Includer, includer.cgi) contains a remote command execution vulnerability (CVE-2005-0689). The flaw allows an attacker to execute arbitrary shell commands by injecting shell metacharacters in the URL or in the template parameter, enabling a remote attacker to run command...

CVE-2005-0689

includer.cgi in The Includer allows remote attackers to execute arbitrary commands via shell metacharacters in 1 the URL or 2 the template parameter...

CVE-2005-0689

includer.cgi in The Includer allows remote attackers to execute arbitrary commands via shell metacharacters in 1 the URL or 2 the template parameter...

CVE-2005-0638

CVE-2005-0638 affects xloadimage (and xli) where filenames are not properly quoted when invoking gunzip, allowing shell metacharacter injection and arbitrary command execution when a malformed filename is processed. The issue impacts xloadimage prior to version 4.1-r2 and xli prior to 1.17, acros...