4033 matches found
Leif M. Wright Web Blog 1.1 - Remote Command Execution
source: https://www.securityfocus.com/bid/9539/info Web Blog has been reported to be prone to a vulnerability that may permit remote attackers to execute arbitrary commands in the context of the hosting web server. This is due to insufficient sanitization of shell metacharacters from variables...
CVE-2003-0990
The CVE-2003-0990 issue affects SquirrelMail 1.4.0 and the GPG Plugin 1.1, where the parseAddress code can be abused to execute shell commands via metacharacters in the To: field. This is a remote command-execution vulnerability exploitable via SMTP delivery (e.g., via crafted email contents) and...
CVE-2003-1538
susehelp in SuSE Linux 8.1, Enterprise Server 8, Office Server, and Openexchange Server 4 does not properly filter shell metacharacters, which allows remote attackers to execute arbitrary commands via CGI queries...
PHP-ping - Count Command Execution
PHP-ping - Count Command Execution source: https://www.securityfocus.com/bid/9309/info It has been reported that php-ping may be prone to a remote command execution vulnerability that may allow remote attackers to execute commands on vulnerable systems. The problem exists due to insufficient...
PHP-ping - 'Count' Command Execution
source: https://www.securityfocus.com/bid/9309/info It has been reported that php-ping may be prone to a remote command execution vulnerability that may allow remote attackers to execute commands on vulnerable systems. The problem exists due to insufficient sanitization of shell metacharacters vi...
CVE-2002-1569
gv 3.5.8, and possibly earlier versions, allows remote attackers to execute arbitrary commands via shell metacharacters in the filename for 1 a PDF file or 2 a gzip file...
DEBIAN-CVE-2002-1569
gv 3.5.8, and possibly earlier versions, allows remote attackers to execute arbitrary commands via shell metacharacters in the filename for 1 a PDF file or 2 a gzip file...
CVE-2002-1569
gv 3.5.8, and possibly earlier versions, allows remote attackers to execute arbitrary commands via shell metacharacters in the filename for 1 a PDF file or 2 a gzip file...
DEBIAN-CVE-2003-0516
cnd.c in mgetty 1.1.28 and earlier does not properly filter non-printable characters and quotes, which may allow remote attackers to execute arbitrary commands via shell metacharacters in 1 caller ID or 2 caller name strings...
CVE-2003-0434
Various PDF viewers including 1 Adobe Acrobat 5.06 and 2 Xpdf 1.01 allow remote attackers to execute arbitrary commands via shell metacharacters in an embedded hyperlink...
DEBIAN-CVE-2003-0434
Various PDF viewers including 1 Adobe Acrobat 5.06 and 2 Xpdf 1.01 allow remote attackers to execute arbitrary commands via shell metacharacters in an embedded hyperlink...
CVE-2003-0516
CVE-2003-0516 affects cnd.c in mgetty 1.1.28 and earlier, where non‑printable characters and quotes are not properly filtered. This may allow remote attackers to execute arbitrary commands via shell metacharacters in the caller ID or caller name strings. Affected product: mgetty (1.1.28 and earli...
CVE-2003-0434
Various PDF viewers including 1 Adobe Acrobat 5.06 and 2 Xpdf 1.01 allow remote attackers to execute arbitrary commands via shell metacharacters in an embedded hyperlink...
CVE-2003-0434
Various PDF viewers including 1 Adobe Acrobat 5.06 and 2 Xpdf 1.01 allow remote attackers to execute arbitrary commands via shell metacharacters in an embedded hyperlink...
CVE-2003-0243
Happycgi.com Happymall 4.3 and 4.4 allows remote attackers to execute arbitrary commands via shell metacharacters in the file parameter for the 1 normalhtml.cgi or 2 memberhtml.cgi scripts...
CVE-2003-0243
CVE-2003-0243 affects Happycgi Happymall 4.3/4.4. The normal_html.cgi and member_html.cgi scripts pass user input to shell operations without proper filtering, enabling remote arbitrary OS command execution via crafted file parameters. Impact: remote code execution with web server privileges. Exp...
CVE-2003-0205
gkrellm-newsticker gkrellm plugin before 0.3-3.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the ticker title of a URI...
CVE-2003-0205
CVE-2003-0205 affects the gkrellm-newsticker plugin for gkrellm: before 0.3-3.1, it allows remote attackers to execute arbitrary commands via shell metacharacters in the ticker URI title. The Debian advisory DSA-294-1 fixes this by upgrading to 0.3-3.1. The associated CAN-2003-0205/0206 issues de...