4031 matches found
CVE-2001-1206
CVE-2001-1206 affects Matrix CGI vault Last Lines 2.0. The vulnerability: remote attackers can execute arbitrary commands via shell metacharacters in the $error_log variable, enabling remote code execution over the network. The provided sources do not specify affected versions beyond Last Lines 2...
CVE-2001-1214
CVE-2001-1214 : The Unix Manual PHP script (manual.php) from Marcus S. Xenakis Unix Manual 1.0 allows remote code execution by supplying a URL with shell metacharacters. The CERT/CC entry confirms that manual.php does not adequately validate input before passing it to the shell, enabling remote c...
CVE-2001-0980
docview before 1.0-15 allows remote attackers to execute arbitrary commands via shell metacharacters that are processed when converting a man page to a web page...
CVE-1999-1512
The AMaViS virus scanner 0.2.0-pre4 and earlier allows remote attackers to execute arbitrary commands as root via an infected mail message with shell metacharacters in the reply-to field...
CVE-1999-1512
The CVE-1999-1512 entry concerns the AMaViS virus scanner, specifically versions 0.2.0-pre4 and earlier. The documented vulnerability allows remote attackers to execute arbitrary commands as root by sending an infected mail message containing shell metacharacters in the reply-to field. The availa...
CVE-2001-0461
CVE-2001-0461 affects the Free On-Line Dictionary of Computing (FOLDOC) template.cgi. Remote attackers can read files and execute commands by injecting shell metacharacters in the template.cgi argument. This is documented in NVD/CVE records; no remediation/patch details are provided in the connec...
CVE-2001-0992
shopplus.cgi in ShopPlus shopping cart allows remote attackers to execute arbitrary commands via shell metacharacters in the "file" parameter...
CVE-2001-0937
CVE-2001-0937 concerns PGPMail.pl CGI (up to version 1.31) where the recipient and pgpuserid CGI variables are not properly filtered before being passed to shell commands. This allows remote attackers to execute arbitrary commands on the server with the web server’s privileges. OpenVAS and Nessus...
CVE-2001-1014
CVE-2001-1014 concerns the E-Shop (WebDiscount) CGI used by eshop.pl. The OpenVAS NASL entry documents a vulnerability in the WebDiscount CGI that allows remote attackers to execute arbitrary commands with the web server’s privileges by supplying shell metacharacters in the seite parameter. This ...
CVE-2001-0930
Technical details about CVE-2001-0930 are not publicly provided in the connected documents. Monitor for updates to confirm affected products, impact and remediation when additional details become available.
CVE-2001-0930
Sendpage.pl allows remote attackers to execute arbitrary commands via a message containing shell metacharacters...
CVE-2001-0956
speechd 0.54 and earlier, with the Festival or rsynth speech synthesis package, allows attackers to execute arbitrary commands via shell metacharacters...
CVE-2001-1214
manual.php in Marcus S. Xenakis Unix Manual 1.0 allows remote attackers to execute arbitrary code via a URL that contains shell metacharacters...
CVE-2001-0844
Vulnerability in 1 Book of guests and 2 Post it! allows remote attackers to execute arbitrary code via shell metacharacters in the email parameter...
CVE-2001-0937
PGPMail.pl 1.31 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 recipient or 2 pgpuserid parameters...
CVE-2001-0930
Sendpage.pl allows remote attackers to execute arbitrary commands via a message containing shell metacharacters...
CVE-2001-0800
CVE-2001-0800 affects the IRIX lpsched service; IRIX 6.5.13f and earlier allow remote command execution via shell metacharacters. Public disclosures include a Metasploit module (tagprinter_exec) and exploit references, with SGI patch advisories available in the linked references. Affected compone...
CVE-2001-0899
Network Tools 0.2 for PHP-Nuke allows remote attackers to execute commands on the server via shell metacharacters in the $hostinput variable...
