4033 matches found
CVE-2004-2610
mntdmount.c in mntd before 0.4.2 might allow local users to gain privileges via shell metacharacters in a remount option in the configuration file. NOTE: It is not clear whether this is a vulnerability because there is not necessarily any common usage in which privilege boundaries are crossed...
CVE-2004-2275
i-mall.cgi in I-Mall Commerce allows remote attackers to execute arbitrary commands via shell metacharacters via the p parameter...
CVE-2004-2347
blog.cgi in Leif M. Wright Web Blog 1.1 and 1.1.5 allows remote attackers to execute arbitrary commands via shell metacharacters such as '|' in the file parameter of ViewFile requests...
CVE-2004-1888
display.cgi in Aborior Encore WebForum allows remote to execute arbitrary commands via shell metacharacters in the file variable...
CVE-2004-1456
filediff in CVStrac allows remote attackers to execute arbitrary commands via shell metacharacters in rcsinfo...
DEBIAN-CVE-2004-2630
The MIME transformation system transformations/textplainexternal.inc.php in phpMyAdmin 2.5.0 up to 2.6.0-pl1 allows remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors...
CVE-2004-2630
The MIME transformation system transformations/textplainexternal.inc.php in phpMyAdmin 2.5.0 up to 2.6.0-pl1 allows remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors...
CVE-2004-1274
The CVE-2004-1274 entry concerns greed 0.81p. The vulnerability is tied to the DownloadLoop function in main.c, which can be triggered by processing a GRX file that contains a filename with shell metacharacters. The underlying issue is a buffer/command handling flaw: DownloadLoop uses strcat to c...
CVE-2004-1274
The DownloadLoop function in main.c for greed 0.81p allows remote attackers to execute arbitrary code via a GRX file containing a filename with shell metacharacters...
CVE-2004-1280
CVE-2004-1280 affects junkie 0.3.1. The vulnerable code is gui_popup_view_fly in gui_tview_popup.c, which allows remote FTP servers to execute arbitrary commands via shell metacharacters in a filename, enabling command execution on the host. The documents do not provide a remediation or patch det...
CVE-2004-1147
Affected software: phpMyAdmin 2.6.0-pl2 and earlier versions before 2.6.1. Vulnerable condition: external MIME-based transformations enabled. Root cause: input containing shell metacharacters leads to remote command execution. Impact: allows remote attackers to execute arbitrary commands on the s...
CVE-2004-1222
weblibs.pl in WebLibs 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the TextFile parameter...
CVE-2004-1147
phpMyAdmin 2.6.0-pl2, and other versions before 2.6.1, with external transformations enabled, allows remote attackers to execute arbitrary commands via shell metacharacters...
CVE-2004-1170
CVE-2004-1170 affects a2ps 4.13, where remote attackers could cause arbitrary command execution by supplying shell metacharacters in a filename. The vulnerability stems from insecure handling of filenames, enabling code execution with the privileges of the invoking user. Several connected advisor...
CVE-2004-1170
a2ps 4.13 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename...
DEBIAN-CVE-2004-0395
The xatitv program in the gatos package does not properly drop root privileges when the configuration file does not exist, which allows local users to execute arbitrary commands via shell metacharacters in a system call...
TWiki: Arbitrary command execution
Background TWiki is a Web-based groupware tool based around the concept of wiki pages that can be edited by anybody with a Web browser. Description The TWiki search function, which uses a shell command executed via the Perl backtick operator, does not properly escape shell metacharacters in the...
CVE-2004-1037
CVE-2004-1037 affects TWiki prior to fix where the search function accepts a user-supplied search string. The vulnerability allows remote attackers to execute arbitrary OS commands by injecting shell metacharacters in the search parameter to the WebSearch script, potentially compromising the TWik...
CVE-2004-0784
The smiley theme functionality in Gaim before 0.82 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename of the tar file that is dragged to the smiley selector...
